The vulnerability CVE-2024-37102 is a CSRF issue in the blossomthemes Vilva product, affecting versions up to 1.2.2. It allows attackers to perform unauthorized actions by exploiting the trust a web application has in a user's browser. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity loss without confidentiality or availability impact.

An attacker could cause an authenticated user to perform unintended actions on the Vilva application, potentially altering data or settings without the user's consent. There is no impact on confidentiality or availability according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens or other standard mitigations in their environment to reduce risk.