This vulnerability in ListingPro arises from missing authorization checks, which means that certain actions or data may be accessible without proper permission validation. The issue affects all versions up to and including 2.9.9. The CVSS score of 5.3 reflects a network attack vector with low attack complexity, no privileges required, and no user interaction needed. The impact is limited to integrity, with no confidentiality or availability impact reported. No vendor advisory or patch information is provided, and the product is not a cloud service.

The vulnerability allows unauthorized users to perform actions or access functionality that should be restricted, potentially leading to unauthorized modification or manipulation of data (integrity impact). There is no reported impact on confidentiality or availability. No known exploits exist in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in ListingPro to ensure proper authorization enforcement. Monitor vendor communications for updates or patches addressing this vulnerability.