This vulnerability is a CSRF issue in the Festi-Team Popup Cart Lite plugin for WooCommerce, affecting versions through 1.1. It allows an attacker to trick authenticated users into submitting unauthorized requests, potentially leading to limited impact such as low integrity and availability loss. The vulnerability does not require privileges and has a low attack complexity but requires user interaction. No official fix or patch has been published as of the data provided.

The impact is limited to low integrity and availability loss due to the CSRF nature of the vulnerability. An attacker could cause a logged-in user to perform unintended actions within the affected plugin, but there is no indication of confidentiality loss. The medium CVSS score reflects the network attack vector, lack of privileges required, and user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider implementing CSRF protections such as verifying nonces or tokens in requests related to the plugin. Monitor vendor channels for updates and apply patches promptly once available.