The vulnerability identified as CVE-2024-37108 in WishList Products WishList Member X is categorized as CWE-22, indicating improper limitation of a pathname to a restricted directory (path traversal). This flaw exists in versions up to 3.26.6 and allows an attacker with low privileges and no user interaction to affect system availability. The CVSS 3.1 score is 7.7, reflecting network attack vector, low attack complexity, and no confidentiality or integrity impact but high impact on availability. No patch or official fix has been published, and no known exploits have been observed.

The impact of this vulnerability is a high severity availability disruption, meaning an attacker could cause denial of service conditions. There is no direct impact on confidentiality or integrity according to the CVSS vector. Since no known exploits are reported, the threat is theoretical but significant due to the potential for service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigations or temporary fixes are documented at this time.