This vulnerability is a CWE-352 Cross-Site Request Forgery issue in the Digital Publications by Supsystic plugin, affecting versions up to 1.7.7. It allows attackers to induce authenticated users to perform unintended actions via crafted requests. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. The impact is limited to integrity with no confidentiality or availability impact reported. No vendor advisory or patch information is currently available.

The vulnerability could allow an attacker to cause an authenticated user to perform unintended actions, potentially modifying data or application state, but it does not affect confidentiality or availability. The medium severity reflects the limited scope and requirement for user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing standard CSRF mitigations such as verifying request origins or using anti-CSRF tokens if possible. Monitor official Supsystic communications for updates.