A Cross-Site Request Forgery (CSRF) vulnerability exists in Booknetic versions up to 4.0.9. This vulnerability allows an attacker to induce a user to perform unwanted actions on the web application in which they are authenticated. The issue has a medium severity with a CVSS score of 4.3, indicating limited impact primarily on integrity without confidentiality or availability consequences.