This vulnerability in Akinsoft LimonDesk (versions s1.02.14 up to but not including v1.02.17) is classified as CWE-1021, involving improper restriction of rendered UI layers or frames. It allows an attacker to overlay an iFrame on the user interface, facilitating clickjacking attacks (CAPEC-103). The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, requiring high privileges and user interaction, and limited impact on confidentiality, integrity, and availability.

The vulnerability could allow an attacker with high privileges to trick a user into interacting with a concealed UI element, potentially leading to unauthorized actions or information disclosure with limited impact. The overall impact is rated as medium severity with low confidentiality, integrity, and availability impacts. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Akinsoft's advisories for updates. Until a patch is available, consider restricting high privilege access and educating users about clickjacking risks to reduce exposure.