The vulnerability CVE-2024-52430 affects the bublick Lis Video Gallery plugin (version 0.2.1 and earlier). It is caused by unsafe deserialization of untrusted data, enabling an attacker to perform object injection. This can lead to remote code execution or other severe impacts on the affected system. The CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently provided.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary code remotely, leading to full compromise of the affected system. Confidentiality, integrity, and availability of the application and potentially the host system are severely impacted. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider disabling or removing the affected Lis Video Gallery plugin to prevent exploitation. Monitor official vendor channels for updates and apply any official fixes promptly once released.