The vulnerability CVE-2025-22301 in zookatron MyBookTable Bookstore is a CSRF issue present in versions up to 3.5.3. It enables attackers to perform unauthorized actions on behalf of authenticated users by exploiting the lack of proper request validation. The CVSS vector indicates the attack can be performed remotely over the network without privileges, requires user interaction, and impacts integrity and availability with no confidentiality impact.

Successful exploitation of this CSRF vulnerability could allow attackers to cause limited integrity and availability impacts by tricking authenticated users into executing unwanted actions. There is no indication of confidentiality compromise. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, users should consider implementing CSRF protections such as anti-CSRF tokens or other request validation mechanisms to mitigate risk.