This vulnerability in MSTW League Manager arises from insufficient protection against CSRF attacks, enabling an attacker to trick authenticated users into submitting malicious requests. The consequence of successful exploitation includes Stored XSS, which can compromise user sessions and data integrity. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction, and it impacts confidentiality, integrity, and availability to a limited extent.

Successful exploitation could allow attackers to execute stored malicious scripts within the application context, potentially leading to session hijacking, data manipulation, or denial of service. The vulnerability affects confidentiality, integrity, and availability at a low to moderate level as per the CVSS metrics. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying manual CSRF protections such as implementing anti-CSRF tokens and validating request origins. Monitoring for updates from the vendor is recommended.