Self-contained XSS -

is there way exploit victims through self-contained xss, xss vulnerabilities protected csrf protections based on login credential ??

thanks

assuming self-contained xss data: uri containing html js, no.

data: uris considered have unique origin, different other origins.