This vulnerability is a CSRF issue in the Newsletter plugin by Stefano Lissa & The Newsletter Team, affecting versions through 8.0.6. It allows an attacker to trick authenticated users into submitting unauthorized requests, potentially leading to limited integrity and availability impacts. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

Successful exploitation could result in limited integrity and availability impacts by causing users to unknowingly perform actions within the affected Newsletter plugin. There is no confidentiality impact reported. No known active exploitation has been observed.

No official patch or remediation is currently available. Users should monitor the vendor's advisory channels for updates. Until a fix is released, consider implementing additional CSRF protections at the web application firewall or server level if feasible. Avoid clicking suspicious links while authenticated in the affected application.