This vulnerability involves a CSRF issue in the Toast Plugins Animator scroll-triggered-animations feature, affecting versions up to 3.0.16. The vulnerability allows an attacker to induce a user to perform unintended actions without their consent. The CVSS vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is necessary. The impact is limited to integrity with no confidentiality or availability impact.

The vulnerability could allow an attacker to perform unauthorized actions on behalf of an authenticated user, potentially altering data or settings within the Animator plugin. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted origins if possible. Monitor official vendor channels for updates and apply any official fixes once released.