This vulnerability is a Cross-Site Request Forgery (CSRF) issue in the Century ToolKit product by Theme Century, affecting versions up to 1.2.1. CSRF vulnerabilities enable attackers to induce users to perform unwanted actions on a web application in which they are authenticated. The CVSS 3.1 base score is 5.4, reflecting a medium severity with network attack vector, low complexity, no privileges required, and requiring user interaction. Confidentiality and integrity impacts are low, with no availability impact. No patch or official remediation information is provided in the available data.

An attacker could exploit this vulnerability to perform unauthorized actions on behalf of an authenticated user, potentially leading to limited confidentiality and integrity impacts within the affected application. There is no indication of availability impact or widespread exploitation at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as anti-CSRF tokens or verifying the origin of requests if possible within the affected environment.