The vulnerability CVE-2025-22347 affects bannersky BSK Forms Blacklist versions up to 3.9. It is a Cross-Site Request Forgery (CSRF) issue that enables an attacker to perform Blind SQL Injection attacks. The CVSS 3.1 score is 8.2, indicating a high severity with network attack vector, low attack complexity, no privileges required, but requiring user interaction. The vulnerability results in a confidentiality breach with high impact and a low impact on availability. There is no vendor advisory or patch information provided at this time.

Successful exploitation allows an attacker to perform Blind SQL Injection via CSRF, potentially leading to unauthorized disclosure of sensitive data (high confidentiality impact). The availability impact is low, and integrity impact is not affected. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as verifying anti-CSRF tokens and restricting form submissions to trusted users to mitigate exploitation risk.