This vulnerability is a CSRF issue (CWE-352) in Native Grid LLC's no-code page builder for performance-based content, affecting versions through 2.1.20. It allows attackers to trick authenticated users into submitting unauthorized requests, potentially causing limited integrity impact without confidentiality or availability loss. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact. No patch or official remediation level has been published by the vendor as of the data provided.

The vulnerability can lead to unauthorized actions performed by authenticated users without their consent, impacting the integrity of the application data or state. There is no confidentiality or availability impact reported. The medium severity score reflects the limited but non-negligible risk posed by this CSRF vulnerability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing standard CSRF mitigations such as verifying anti-CSRF tokens in requests and restricting sensitive actions to POST requests with proper validation. Monitor vendor communications for updates on patches or official mitigations.