This vulnerability in Frenify Mow (versions <= 4.10) enables an attacker to exploit CSRF to inject code remotely. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is needed. The vulnerability results in a complete compromise of confidentiality, integrity, and availability of the affected system. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates or user-applied fixes.

Successful exploitation allows an attacker to inject arbitrary code via CSRF, leading to full compromise of the affected system's confidentiality, integrity, and availability. This can result in unauthorized actions, data theft, or system disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying request origins, using anti-CSRF tokens, or restricting access to trusted users. Monitor vendor channels for updates.