The vulnerability CVE-2024-49327 in Woostagram Connect versions up to 1.0.2 allows attackers to upload files of dangerous types without restriction. This can include web shells, which may be executed on the server, leading to full compromise. The issue is exploitable remotely without authentication or user interaction, resulting in complete loss of confidentiality, integrity, and availability of the affected system. No patch or official remediation has been documented yet.

Successful exploitation allows an attacker to upload and execute arbitrary code on the affected server, leading to full system compromise. This includes the potential for data theft, data manipulation, service disruption, and further network penetration. The vulnerability is rated critical with a CVSS score of 10.0, reflecting its severe impact and ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict file upload permissions, implement strict file type validation, and consider disabling file uploads if not necessary. Monitor for suspicious activity related to file uploads and web shell presence.