This vulnerability is a CSRF issue in the Wow-Company Modal Window component, affecting versions up to and including 6.1.4. It allows attackers to trick authenticated users into submitting unauthorized requests, potentially causing limited integrity and availability impacts. The CVSS vector indicates the attack can be performed remotely without privileges, requires user interaction, and results in no confidentiality impact but some integrity and availability impact. No patch or official remediation information is provided in the available data.

The vulnerability can lead to limited integrity and availability impacts by enabling attackers to execute unauthorized actions through CSRF attacks. Confidentiality is not affected. There are no known exploits in the wild, and the impact is rated medium severity based on the CVSS score of 5.4.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor the vendor's communications for updates. Implementing standard CSRF protections such as anti-CSRF tokens and validating request origins may help mitigate risk until an official fix is available.