The vulnerability CVE-2024-49217 affects the madiriaashish plugin 'Adding drop down roles in registration' in versions up to 1.1. It involves incorrect privilege assignment that can lead to privilege escalation, allowing users to gain higher privileges than intended through the role selection dropdown during registration. No detailed technical or exploitation information is provided, and no patch or mitigation details are currently available.

Successful exploitation of this vulnerability could allow an attacker to escalate privileges by manipulating role assignments during user registration, potentially gaining unauthorized access or elevated permissions within the affected system. However, no known exploits are reported, and the extent of impact depends on the deployment context.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the registration functionality or monitor for suspicious role assignments if possible. Avoid granting excessive privileges through the registration dropdown roles.