The vulnerability CVE-2025-24724 is a CSRF issue in Wow-Company's Side Menu Lite plugin (versions <= 5.3.1). It allows attackers to induce authenticated users to submit unauthorized requests, potentially leading to limited integrity and availability impacts. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. There is no vendor advisory or patch link provided, and no known exploits have been reported.

The impact is limited to integrity and availability with low severity. An attacker could cause an authenticated user to perform unintended actions, but no confidentiality loss is indicated. The medium CVSS score reflects the need for user interaction and the limited scope of impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying request origins or using anti-CSRF tokens if possible. Monitor vendor communications for updates on patches or official fixes.