CVE-2024-31933 is a CSRF vulnerability in the Live Composer Team Page Builder: Live Composer plugin, affecting versions through 1.5.35. The vulnerability allows unauthorized commands to be transmitted from a user that the web application trusts, potentially leading to limited integrity and availability impacts. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. No vendor advisory or patch is currently available, and no known exploits have been reported.

The vulnerability can lead to limited integrity and availability impacts by allowing attackers to trick authenticated users into submitting unauthorized requests. Confidentiality is not impacted. The medium CVSS score reflects the moderate risk due to the need for user interaction and lack of privileges required for exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted users. Monitor official Live Composer Team communications for updates on patches or mitigations.