This vulnerability is a CSRF issue in M&S Consulting Email Before Download versions up to 6.9.7. It allows an attacker to induce an authenticated user to perform unintended actions via crafted requests. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts integrity but not confidentiality or availability. No vendor advisory or patch information is currently available.

The impact is limited to integrity, meaning an attacker could potentially cause unauthorized actions to be performed in the context of an authenticated user. There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted origins if possible. Monitor vendor channels for updates.