This vulnerability is a CSRF issue in the Tribulant Slideshow Gallery plugin versions up to 1.7.8. It enables attackers to induce authenticated users to perform unintended actions by exploiting the lack of proper request validation. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact. No patch or official remediation level has been published as of the data available.

The vulnerability allows attackers to perform unauthorized actions on behalf of authenticated users, potentially modifying data or settings within the Slideshow Gallery plugin. There is no impact on confidentiality or availability, and the integrity impact is limited. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying request origins or using tokens if possible. Monitor official Tribulant communications for updates on patches or mitigations.