The vulnerability CVE-2025-62871 is a Cross-Site Request Forgery (CSRF) issue in the Just TinyMCE Custom Styles plugin (versions ≤ 1.2.1). CSRF vulnerabilities enable attackers to induce authenticated users to perform unwanted actions without their consent. The CVSS vector indicates the attack can be performed remotely over the network without privileges, requires user interaction, and impacts integrity with no confidentiality or availability impact. No patch or vendor advisory is provided, and no known exploits exist at this time.

An attacker could exploit this CSRF vulnerability to cause an authenticated user to perform unintended actions within the Just TinyMCE Custom Styles plugin. The impact is limited to integrity with no confidentiality or availability effects. The medium CVSS score reflects the moderate risk due to required user interaction and limited impact scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting plugin usage to trusted users. Monitor vendor channels for updates regarding patches or official mitigations.