The vulnerability CVE-2024-50531 affects RSVPMaker for Toastmasters up to version 6.2.4. It allows an attacker to upload files without proper restrictions on file types, including executable web shells. This can result in remote code execution on the server hosting the application. The CVSS v3.1 base score is 10.0, reflecting network attack vector, no required privileges or user interaction, and complete compromise of confidentiality, integrity, and availability.

Successful exploitation can lead to full remote code execution on the affected server, allowing attackers to execute arbitrary commands, modify or steal data, and disrupt service availability. The vulnerability poses a critical risk to the confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — no official fix or patch links are provided in the available data. Users should monitor the vendor's advisory channels for updates and apply any official patches once available. Until then, restricting file upload permissions, disabling file uploads if not necessary, or implementing additional file validation and filtering controls may reduce risk.