The sbouey Falang multilanguage plugin versions up to 1.3.51 contain a CSRF vulnerability that could allow an attacker to induce an authenticated user to perform unintended actions via crafted requests. The vulnerability does not affect confidentiality or availability but may impact integrity to a limited extent. No patch or vendor advisory is currently provided, and no exploits are known in the wild.

The vulnerability could allow an attacker to perform limited unauthorized actions by exploiting the CSRF flaw when a user is authenticated. There is no impact on confidentiality or availability, and the integrity impact is low. No evidence of active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted users. Monitor vendor channels for updates.