This vulnerability affects Tikweb Management's Fast User Switching plugin (<= 1.4.10) and allows CSRF attacks, where an attacker can induce an authenticated user to execute unwanted commands without their consent. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity loss without confidentiality or availability impact. No patch or official remediation guidance is currently provided.

An attacker could exploit this CSRF vulnerability to cause an authenticated user to perform unintended actions within the Fast User Switching plugin, potentially altering user session states or switching users without authorization. The impact is limited to integrity loss, with no direct confidentiality or availability impact reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, consider implementing CSRF protections such as verifying anti-CSRF tokens on sensitive requests or restricting access to trusted users. Monitor vendor channels for updates regarding an official fix.