This vulnerability (CWE-434) in SpreadsheetConverter's Import Spreadsheets from Microsoft Excel component allows an attacker with high privileges to upload files of dangerous types without restriction, which can result in code injection. The affected versions include all versions up to 10.1.4. The CVSS 3.1 score of 9.1 reflects network attack vector, low attack complexity, required privileges, no user interaction, and complete impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor or advisory sources.

Successful exploitation can lead to full compromise of the affected system, including unauthorized code execution, data breach, and service disruption. The vulnerability impacts confidentiality, integrity, and availability at a critical level. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the vulnerable component to trusted users only and monitor for suspicious file uploads. Avoid exposing the import functionality to untrusted networks or users.