A Cross-Site Request Forgery (CSRF) vulnerability exists in webriti Spasalon up to version 3.0. This vulnerability allows an attacker to trick authenticated users into submitting unwanted requests, potentially leading to unauthorized actions with high impact on confidentiality, integrity, and availability.