This vulnerability is classified as CWE-352, a Cross-Site Request Forgery issue in the Nudgify Social Proof, Sales Popup & FOMO product. It affects all versions up to 1.3.3. The vulnerability allows an attacker to induce users to perform actions without their consent, potentially leading to limited integrity impact. The CVSS vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. No official fix or patch has been published, and the product is not a cloud service, so remediation depends on vendor updates.

The impact is limited to integrity as the vulnerability could allow unauthorized actions to be performed via CSRF. There is no confidentiality or availability impact reported. The medium severity reflects the need for user interaction and the limited scope of potential damage.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing standard CSRF mitigations such as verifying origin headers or using anti-CSRF tokens if possible. Monitor vendor communications for updates on patches or official mitigations.