This vulnerability in Len Slider (<= 2.0.11) involves CSRF that can be exploited to perform unauthorized requests with the privileges of an authenticated user. The vulnerability also allows reflected XSS attacks. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently provided.

Successful exploitation could allow attackers to trick authenticated users into submitting unauthorized requests, potentially leading to limited confidentiality, integrity, and availability impacts. The reflected XSS component may enable injection of malicious scripts, further compromising user interactions. However, no known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as tokens and validating user requests where possible. Avoid interacting with untrusted links while authenticated in Len Slider environments.