CVE-2024-34551 is a CWE-22 Improper Limitation of a Pathname to a Restricted Directory vulnerability in Select-Themes Stockholm. It allows an attacker to perform PHP Local File Inclusion by exploiting insufficient validation of file path inputs, potentially leading to remote code execution or full system compromise. The vulnerability affects Stockholm versions through 9.6. The CVSS v3.1 base score is 9.0 (critical), reflecting network attack vector, high complexity, no privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability. No patch or official remediation level has been published yet.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including unauthorized disclosure, modification, or destruction of data, and disruption of service. The critical CVSS score indicates a severe risk if exploited. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to vulnerable components and applying any available workarounds from the vendor. Monitor official Select-Themes communications for updates.