This vulnerability (CVE-2025-62986) involves a CSRF flaw in the FanBridge signup product, specifically versions up to 0.6. The CSRF vulnerability enables stored XSS attacks by allowing unauthorized requests to be made on behalf of authenticated users. The CVSS score is 7.1, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No known exploits in the wild or vendor patches are currently documented.

Successful exploitation could allow attackers to execute stored XSS attacks via CSRF, potentially compromising user data confidentiality, integrity, and availability within the affected FanBridge signup environment. This could lead to unauthorized actions performed with the privileges of the victim user.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens and input validation to mitigate risk. Monitor vendor channels for updates and patches addressing this vulnerability.