CVE-2025-23805 describes a CSRF vulnerability in the itamarg SEOReseller Partner product, specifically in versions up to 1.3.15. CSRF vulnerabilities enable attackers to induce users to perform actions they did not intend by exploiting the user's authenticated session. The vulnerability is remotely exploitable without privileges but requires user interaction. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and impacts on confidentiality, integrity, and availability at a low level.

Successful exploitation of this CSRF vulnerability could allow an attacker to perform unauthorized actions on behalf of an authenticated user, potentially leading to partial loss of confidentiality, integrity, and availability of the affected system. The impact is rated high due to the combination of these factors and the scope change, but no specific exploit or attack scenarios are documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens, validating the origin of requests, or restricting actions to POST requests with proper validation. Monitor vendor communications for updates on patches or official mitigations.