This vulnerability is a CSRF issue in the creativethemeshq Blocksy product, affecting versions up to and including 2.0.22. It enables attackers to induce authenticated users to perform unintended actions via crafted requests. The CVSS vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts integrity with no confidentiality or availability impact.

The impact is limited to integrity, meaning unauthorized changes could be made through forged requests if a user is tricked into interacting with malicious content. There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

No official patch or vendor advisory is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying request origins or using anti-CSRF tokens if possible.