This vulnerability is a Cross-Site Request Forgery (CSRF) issue in Fetch Designs Sign-up Sheets (<= 2.3.3). It allows an attacker to induce an authenticated user to perform unintended actions on the application without their consent. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is needed. The impact is limited to integrity with no confidentiality or availability impact. No patch or mitigation details are provided in the available data.

The vulnerability allows unauthorized actions to be performed by leveraging the victim's authenticated session, potentially altering data or state within the Sign-up Sheets application. There is no impact on confidentiality or availability. The medium severity rating reflects the limited scope and requirement for user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing standard CSRF mitigations such as verifying anti-CSRF tokens on state-changing requests and educating users to avoid interacting with untrusted sites while authenticated. Monitor vendor communications for updates on patches or official fixes.