The lisensee NetInsight Analytics Implementation Plugin versions up to 1.0.3 contain a CSRF vulnerability that could allow an attacker to induce an authenticated user to perform actions without their consent. The vulnerability does not impact confidentiality or availability but may impact integrity to a limited extent. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

This vulnerability may allow an attacker to cause limited integrity impact by tricking users into performing unintended actions within the affected plugin. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens in requests or restricting plugin access to trusted users. Monitor vendor communications for official patches or updates.