The vulnerability identified as CVE-2024-39623 affects the ListingPro product by CridioStudio, specifically versions up to 2.9.4. It is a Cross-Site Request Forgery (CSRF) flaw that enables attackers to bypass authentication mechanisms. This can allow unauthorized actions to be performed on behalf of authenticated users, impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this CSRF vulnerability can lead to authentication bypass, allowing attackers to perform unauthorized actions with the privileges of legitimate users. This can result in full compromise of the affected system's confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying any recommended temporary mitigations from the vendor or restrict access to the vulnerable functionality. Avoid clicking on untrusted links or visiting untrusted websites while authenticated to the affected ListingPro installation.