This vulnerability is a CWE-352 Cross-Site Request Forgery (CSRF) issue in DAEXT Soccer Live Scores, affecting versions through 1.0.5. CSRF vulnerabilities enable attackers to induce users to perform actions without their consent, potentially altering data or state within the application. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is necessary. The impact is limited to integrity with no confidentiality or availability loss. No patch or mitigation details are provided by the vendor or advisory.

The vulnerability allows an attacker to cause an authenticated user to perform unintended actions, potentially altering application data or state. There is no impact on confidentiality or availability. The integrity impact is low, as the attacker must rely on user interaction and cannot escalate privileges or cause denial of service. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should be cautious about clicking on untrusted links or visiting suspicious websites while authenticated to the affected application. Implementing anti-CSRF tokens or other CSRF protections in the application is recommended once a patch or update is released.