The freetobook Freetobook Responsive Widget contains a CSRF vulnerability in versions up to 1.1. This vulnerability enables attackers to perform unauthorized actions by exploiting the trust a web application has in the user's browser. The vulnerability does not require privileges or authentication but does require user interaction (UI:R). The impact is limited to integrity loss without confidentiality or availability impact, reflected by a CVSS 3.1 base score of 4.3.

Successful exploitation could allow an attacker to cause a user to perform unintended actions on the freetobook Responsive Widget, potentially altering data or settings without the user's consent. There is no confidentiality or availability impact reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting widget actions to authenticated sessions with proper validation. Monitor vendor channels for updates and patches.