CVE-2025-54673 is a CSRF vulnerability affecting Ays Pro Chartify chart-builder versions up to 3.5.3. It allows an attacker to induce an authenticated user to perform unwanted actions via crafted requests. The vulnerability has a CVSS 3.1 base score of 4.3 (medium severity) with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and limited integrity impact. No official patch or mitigation details are available at this time.

The vulnerability could allow an attacker to cause a user to perform unintended actions within the Chartify application, potentially altering data integrity to a limited extent. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official mitigation is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted origins if possible.