The Dutch van Andel Custom List Table Example plugin (version <= 1.4.1) contains a CSRF vulnerability that can be exploited to perform unauthorized requests by tricking authenticated users into executing unintended actions. Additionally, the vulnerability involves reflected XSS, which may allow injection of malicious scripts. The CVSS 3.1 base score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability.

Successful exploitation could allow attackers to execute unauthorized actions on behalf of authenticated users and inject malicious scripts via reflected XSS, potentially leading to partial compromise of user data confidentiality, integrity, and availability. However, there are no known exploits in the wild reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider applying temporary mitigations such as disabling the affected plugin or restricting access to trusted users only. Monitor for vendor updates regarding a fix.