The vulnerability CVE-2024-52405 affects the bikramjoshii B-Banner Slider plugin up to version 1.1. It allows an attacker with low privileges to upload files of dangerous types without restriction, including web shells, which can lead to remote code execution on the web server. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, no user interaction, and complete impact on confidentiality, integrity, and availability. No official patch or fix is currently documented, and the plugin is not a cloud service, so remediation depends on vendor updates or user mitigation.

Successful exploitation allows an attacker to upload a web shell, resulting in full compromise of the affected web server. This includes complete loss of confidentiality, integrity, and availability of the system hosting the vulnerable plugin. The vulnerability is critical and can lead to remote code execution with low privileges required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should restrict file upload permissions, disable or remove the vulnerable plugin if possible, and monitor for suspicious activity related to file uploads. Avoid granting unnecessary privileges to users who can upload files.