This vulnerability in flytedesk Flytedesk Digital enables an attacker to perform CSRF attacks that result in Stored XSS. The affected versions are from an unspecified initial release through version 20181101. The CVSS vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is needed. The vulnerability impacts confidentiality, integrity, and availability at a low level. No patch or official remediation details are provided in the available data.

Successful exploitation could allow an attacker to execute stored malicious scripts in the context of the affected application, potentially leading to data disclosure, modification, or disruption of service. The CVSS score of 7.1 reflects a high severity impact on confidentiality, integrity, and availability, but exploitation requires user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as anti-CSRF tokens and input validation to mitigate the risk of stored XSS via CSRF. Monitor vendor channels for updates and patches.