This vulnerability in Booqable Rental Software (up to version 2.4.25) is a Cross-Site Request Forgery (CSRF) issue that allows attackers to induce authenticated users to perform unwanted actions without their consent. The vulnerability does not impact confidentiality or availability but may affect integrity by enabling unauthorized state-changing requests. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

The impact is limited to potential unauthorized modification of data or state within the Booqable Rental application due to CSRF. There is no direct impact on confidentiality or availability. The medium severity score reflects the limited but non-negligible risk of integrity compromise through user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens or same-site cookie attributes if possible. Monitor vendor communications for updates on patches or official mitigations.