This vulnerability involves a CSRF issue in the codedraft Mediabay - WordPress Media Library Folders plugin that can be exploited to trigger reflected XSS attacks. The affected versions include all versions up to 1.4. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is necessary. The vulnerability impacts confidentiality, integrity, and availability to a low degree. No patch or official fix has been disclosed yet.

Successful exploitation could allow an attacker to execute unauthorized actions on behalf of an authenticated user and conduct reflected XSS attacks, potentially leading to information disclosure, session hijacking, or other client-side impacts. The overall impact is rated as high due to the combination of CSRF and XSS vulnerabilities affecting confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the affected plugin or implementing additional CSRF protections at the application or web server level. Monitor official vendor channels for updates.