The vulnerability identified as CVE-2024-31280 affects the Church Admin software by andy_moyle, specifically versions up to and including 4.1.5. It involves an unrestricted file upload flaw where the application does not properly restrict or validate the types of files that can be uploaded. This could allow an attacker to upload files that may be dangerous or malicious. No CVSS score or detailed technical exploitation information is provided. No vendor advisory or patch information is available, and no known exploits have been reported.

The impact of this vulnerability is that an attacker could upload files with dangerous types to the Church Admin application, potentially leading to unauthorized actions depending on how the uploaded files are handled by the system. Without further details or known exploits, the exact impact cannot be fully determined. There is no indication that this vulnerability has been exploited in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. In the meantime, restricting file upload permissions and implementing manual validation or filtering of uploaded files may reduce risk.