The vulnerability CVE-2024-52372 affects WebTechGlobal Easy CSV Importer BETA versions up to 7.0.0 and allows attackers to upload files of dangerous types without restriction. This can be exploited to upload a web shell to the server, resulting in full system compromise. The CVSS 3.1 base score is 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), reflecting a critical severity with network attack vector, no required privileges or user interaction, and complete impact on confidentiality, integrity, and availability. No patch or vendor advisory detailing remediation is currently provided.

Successful exploitation allows an unauthenticated attacker to upload arbitrary files, including web shells, to the affected server. This can lead to full remote code execution, complete system compromise, data theft, data modification, and denial of service. The vulnerability affects all versions of Easy CSV Importer BETA up to 7.0.0.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to disable or restrict file upload functionality in Easy CSV Importer BETA to prevent exploitation. Monitor vendor communications for updates and apply patches promptly once released.