The vulnerability CVE-2025-67534 in Jacques Malgrange Rencontre is a CSRF issue that enables Stored XSS attacks. It affects all versions up to 3.13.7. The CVSS 3.1 score of 7.1 indicates a high-severity vulnerability with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation of this CSRF vulnerability can lead to Stored XSS, allowing attackers to inject malicious scripts that persist on the application. This can compromise user confidentiality, integrity, and availability. The vulnerability requires user interaction but no privileges, making it a significant risk for users of affected versions. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should apply standard CSRF mitigations such as implementing anti-CSRF tokens and validating user requests where possible. Monitor vendor channels for updates and apply patches promptly once available.