A cross-site request forgery (CSRF) vulnerability exists in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to version 20250320. This vulnerability allows remote attackers to perform unauthorized actions by exploiting the lack of proper request validation. The vendor was notified but has not responded, and public exploit details have been disclosed. The vulnerability has a medium severity rating with a CVSS score of 4.3.