The vulnerability CVE-2024-49330 in brx8r Nice Backgrounds allows an attacker to upload files of dangerous types, such as web shells, without restriction. This can lead to remote code execution and full compromise of the affected web server. The issue affects versions up to and including 1.0. The vulnerability is exploitable over the network without authentication or user interaction, resulting in complete loss of confidentiality, integrity, and availability. There is no indication of an official patch or vendor advisory providing remediation at this time.

Successful exploitation of this vulnerability can lead to remote code execution on the web server hosting Nice Backgrounds, allowing attackers to execute arbitrary commands, compromise sensitive data, modify or delete data, and disrupt service availability. The critical CVSS score of 10 reflects the high risk and potential for severe impact on affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting file upload functionality in Nice Backgrounds or isolating the application to minimize potential impact. Monitor for vendor updates and apply patches promptly once released.