The vulnerability identified as CVE-2024-37418 affects Church Admin versions up to 4.4.6. It involves an unrestricted file upload flaw where the application does not properly restrict the types of files that can be uploaded. This could allow an attacker to upload files that may be harmful or executable, potentially leading to further compromise depending on the application's handling of uploaded files. No CVSS score or detailed technical exploitation information is available.

The impact of this vulnerability is the potential for an attacker to upload dangerous file types to the Church Admin application, which may lead to unauthorized code execution or other malicious activities depending on how the application processes these files. However, no known exploits have been reported, and the exact impact depends on the deployment context and additional security controls in place.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to restrict file upload functionality where possible and implement manual or alternative validation controls to prevent dangerous file types from being uploaded.