This vulnerability (CVE-2024-30521) is classified as CWE-352, indicating a Cross-Site Request Forgery issue in Landingi Landing Pages software versions up to 3.1.1. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) indicates that the attack can be performed remotely over the network without privileges but requires user interaction. The impact affects integrity and availability but not confidentiality. No patch or official remediation level has been disclosed by the vendor or assigner as of the publication date.

Successful exploitation could allow an attacker to induce an authenticated user to perform actions that alter data or disrupt availability on the Landingi Landing Pages platform. Confidential information is not affected. The medium CVSS score reflects limited but non-negligible impact on integrity and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing standard CSRF mitigations such as verifying origin headers, using anti-CSRF tokens, or restricting actions to authenticated sessions with additional verification. Monitor vendor communications for updates on patches or official mitigations.