The vulnerability CVE-2024-24714 affects the Icons Font Loader product by bPlugins LLC, allowing unrestricted upload of files with dangerous types. This can be exploited by an attacker with high privileges to upload malicious files, potentially compromising the system's confidentiality, integrity, and availability. The CVSS 3.1 base score is 7.2, reflecting a high severity with network attack vector, low attack complexity, no user interaction, and unchanged scope. The vulnerability is present in versions up to 1.1.4. No patch or official remediation level has been provided yet.

Successful exploitation can lead to complete compromise of the affected system, including unauthorized disclosure, modification, or destruction of data and disruption of service. The attacker requires high privileges to exploit this vulnerability, which limits the attack surface but still poses a significant risk if such access is obtained.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the upload functionality to trusted users only and monitor for any suspicious file uploads. Avoid exposing the upload interface to untrusted networks or users.