The vulnerability CVE-2024-53781 affects homejunction SpatialMatch IDX through version 3.0.9. It is a CSRF vulnerability that enables stored XSS attacks by exploiting insufficient request validation. An attacker could trick an authenticated user into submitting a crafted request that stores malicious scripts, potentially impacting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates the attack can be performed remotely with low complexity and requires user interaction, with scope changed and low impact on confidentiality, integrity, and availability.

Successful exploitation could allow attackers to execute stored XSS attacks via CSRF, potentially leading to unauthorized actions performed in the context of an authenticated user. This could result in partial compromise of user data confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens and validating user requests. Monitor vendor communications for updates on patches or official mitigations.