This vulnerability in jordan.hatch Infusionsoft Analytics (infusionsoft-web-tracker) allows CSRF attacks, where an attacker can trick an authenticated user into submitting unauthorized requests. The affected versions include all versions up to 2.0. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction, with no confidentiality impact, limited integrity impact, and low availability impact.

An attacker could exploit this vulnerability to cause an authenticated user to perform unintended actions, potentially leading to limited integrity and availability impacts on the affected system. There is no confidentiality impact reported. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. In the meantime, consider implementing CSRF protections such as anti-CSRF tokens or same-site cookies if possible.