The vulnerability identified as CVE-2025-39599 in Webilia Inc.'s Listdom product is an Open Redirect flaw. It occurs when the application improperly handles URL redirection, allowing attackers to redirect users to untrusted external websites. This can be exploited to conduct phishing attacks by misleading users into visiting malicious sites. The issue affects Listdom versions up to 4.0.0. The CVSS 3.1 vector indicates the vulnerability is remotely exploitable over the network without privileges, requires user interaction, and impacts confidentiality with a medium severity score of 4.7. No patch or official remediation information is provided.

The primary impact is the potential facilitation of phishing attacks by redirecting users to malicious external sites. Confidentiality impact is rated low, with no direct impact on integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with URLs from Listdom and consider implementing additional controls such as URL validation or user warnings for redirects.