This vulnerability in Infigo Software's IS-theme-companion plugin involves Cross-Site Request Forgery (CSRF) that enables object injection. The affected versions include all versions up to 1.59. The CVSS 3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is available at this time.

Successful exploitation of this CSRF vulnerability could allow an attacker to inject objects, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. The high CVSS score reflects the significant impact if exploited. However, there are no known exploits in the wild reported currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying origin headers or using anti-CSRF tokens where possible. Monitor vendor channels for updates and apply patches promptly once available.