The vulnerability identified as CVE-2024-47649 affects THATplugin Iconize up to version 1.2.4. It involves an unrestricted file upload flaw that permits attackers with high privileges to upload files of dangerous types without restriction. This can result in a complete system compromise, impacting confidentiality, integrity, and availability. The CVSS v3.1 base score is 9.1, indicating critical severity. The vulnerability is not related to a cloud service, and no known exploits are reported in the wild. No patch or official remediation guidance is currently available.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including unauthorized disclosure of information, modification or destruction of data, and disruption of service. The CVSS score of 9.1 reflects critical impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict high-privilege user access and monitor for suspicious file upload activity related to THATplugin Iconize. Avoid deploying the affected versions in sensitive environments if possible.