The vulnerability CVE-2024-37412 in blossomthemes Blossom Shop (<= 1.1.7) is a Cross-Site Request Forgery (CSRF) issue. CSRF vulnerabilities enable attackers to induce users to execute unwanted actions in a web application where they are authenticated. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity loss without confidentiality or availability impact.

An attacker could exploit this vulnerability to perform unauthorized actions on behalf of an authenticated user, potentially altering data or settings within the Blossom Shop application. There is no impact on confidentiality or availability reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens or other application-level mitigations if possible. Monitor vendor channels for updates and apply patches promptly once released.