This vulnerability (CWE-352) in Softtr Information Technology Trade Ltd. Co.'s E-Commerce Pack allows attackers to exploit CSRF to perform unauthorized actions by tricking authenticated users into submitting unwanted requests. It affects versions prior to 5.03.01.49. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality and integrity with low impact on availability. No vendor advisory or patch information is currently provided.

Successful exploitation could allow attackers to perform unauthorized actions with the privileges of an authenticated user, potentially leading to disclosure or modification of sensitive information and limited disruption of service. The high CVSS score reflects significant confidentiality and integrity impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as anti-CSRF tokens and validating the origin of requests as temporary mitigations.