This vulnerability in rudrainn Training – Courses allows unrestricted upload of files with dangerous types, such as web shells, enabling an attacker with low privileges to execute arbitrary code on the web server. The issue affects all versions up to and including 2.0.1. The vulnerability has a CVSS 3.1 base score of 9.9, reflecting its critical impact and ease of exploitation over the network without user interaction. No vendor advisory or patch links are currently provided, and the product is not a cloud service, so remediation depends on vendor updates or user-applied mitigations.

Successful exploitation allows an attacker to upload and execute malicious files on the web server, resulting in full compromise of the system's confidentiality, integrity, and availability. This can lead to unauthorized access, data theft, data manipulation, and potential service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict file upload permissions, implement strict file type validation, and monitor for suspicious uploads as temporary mitigations.