This vulnerability (CVE-2025-58844) affects the Subhash Kumar Database to Excel software versions up to 1.0. It is characterized by a Cross-Site Request Forgery (CSRF) flaw that allows attackers to trick authenticated users into submitting unwanted requests. The CSRF vulnerability is coupled with Stored Cross-Site Scripting (XSS), enabling persistent injection of malicious scripts into the application. The CVSS 3.1 base score of 7.1 reflects a high-severity issue with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. There is no vendor advisory or patch information provided, and the product is not a cloud service, so remediation must be handled by the user or vendor.

Successful exploitation could allow an attacker to perform unauthorized actions on behalf of an authenticated user due to the CSRF vulnerability. The Stored XSS component may enable persistent script injection, potentially leading to data theft, session hijacking, or other malicious activities affecting confidentiality, integrity, and availability of the application data. The overall impact is rated high based on the CVSS score and described effects.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor for vendor updates. Until a patch is available, consider implementing CSRF protections such as verifying anti-CSRF tokens and sanitizing user inputs to mitigate Stored XSS risks. Avoid using affected versions in production environments if possible.