This vulnerability involves a CSRF flaw in planetstudio Builder for Contact Form 7 by Webconstruct (<= 1.2.2). An attacker could exploit this to trick authenticated users into submitting unauthorized requests, potentially causing limited impact on the integrity of the application. The vulnerability does not affect confidentiality or availability, and requires user interaction. No official patch or remediation details are currently provided.

The impact is limited to integrity as the vulnerability allows unauthorized actions via CSRF but does not disclose sensitive information or cause denial of service. The medium CVSS score reflects the requirement for user interaction and the lack of privilege needed to exploit the issue.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing standard CSRF protections such as verifying anti-CSRF tokens in requests or restricting actions to authenticated sessions with additional validation.