This vulnerability is a CSRF issue in ChrisHurst Simple Optimizer (<= 1.2.7) that enables attackers to induce authenticated users to perform unwanted actions without their consent. The CVSS 3.1 vector indicates the attack can be performed remotely with low complexity, requires no privileges but does require user interaction, and impacts integrity but not confidentiality or availability.

Successful exploitation could allow an attacker to cause limited integrity impact by making authenticated users perform unintended actions within the Simple Optimizer application. There is no impact on confidentiality or availability reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted origins if possible. Monitor vendor communications for official patches or updates.