This vulnerability is a CSRF issue in AitThemes Citadela Listing prior to version 5.20.0. It enables attackers to trick authenticated users into submitting unwanted requests to the application, potentially causing limited integrity and availability impacts. The CVSS vector indicates the attack can be performed remotely without privileges, requires user interaction, and results in low integrity and low availability impact. No official fix or mitigation details have been published by the vendor yet.

Successful exploitation could allow an attacker to perform unauthorized actions on behalf of an authenticated user, potentially leading to limited integrity and availability issues within the affected application. There is no indication of confidentiality impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing standard CSRF mitigations such as verifying anti-CSRF tokens and limiting the impact of authenticated actions. Monitor vendor communications for updates on patches or official mitigations.