This vulnerability is an unauthenticated CSRF issue in Slider by 10Web affecting versions up to 1.2.62. It allows attackers to trick users into submitting unwanted requests that can cause state changes or disruptions. The CVSS 3.1 base score is 7.4, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, no confidentiality or integrity impact, but high availability impact.

The vulnerability can lead to denial of service or disruption of availability of the Slider by 10Web plugin due to unauthorized requests executed without user consent. There is no impact on confidentiality or integrity according to the CVSS vector. Exploitation does not require authentication but does require user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing CSRF protections such as verifying request origins or employing web application firewalls to mitigate potential exploitation.