This vulnerability (CVE-2024-22291) is classified as CWE-352, a Cross-Site Request Forgery issue in the Browser Theme Color extension by Marco Milesi. It affects versions up to 1.3 and allows attackers to trick users into submitting unauthorized requests that could alter the extension's behavior or settings. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact. No patch or fix information is provided, and the product is not a cloud service.

The impact is limited to integrity, where an attacker could cause a user to unknowingly perform actions that modify the extension's settings or behavior. There is no direct confidentiality or availability impact reported. No known exploitation in the wild has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted websites and avoid clicking suspicious links that could trigger CSRF attacks. Monitoring vendor communications for updates is recommended.