A Cross-Site Request Forgery (CSRF) vulnerability exists in PluginUs.Net BEAR up to version 1.1.5. This vulnerability allows an attacker to induce a user to perform unwanted actions on the affected application. The CVSS score is 4.3, indicating a medium severity level.