CVE-2025-47667 describes a Cross-Site Request Forgery (CSRF) vulnerability in the qusupport LiveAgent product, affecting versions up to 4.4.7. CSRF vulnerabilities allow attackers to induce users to perform actions they did not intend by exploiting the user's authenticated session. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts integrity and availability but not confidentiality. No patch or vendor advisory is currently provided, and no exploits are known in the wild.

The vulnerability allows an attacker to cause limited integrity and availability impacts by tricking authenticated users into submitting unauthorized requests. Confidentiality is not affected. The medium CVSS score reflects these limited impacts. No known exploitation has been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, users should consider implementing CSRF protections such as verifying anti-CSRF tokens in requests or restricting actions to trusted origins where possible. Monitor vendor channels for updates.