The vulnerability CVE-2024-52450 affects officialprocoders nBlocks up to version 1.0.2. It arises from improper control of filenames in PHP include or require statements, enabling PHP Local File Inclusion. This can allow an attacker with limited privileges to include unauthorized files, potentially leading to code execution or data disclosure. The CVSS 3.1 vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can result in local file inclusion, allowing attackers to read sensitive files or execute arbitrary code within the context of the web server. This compromises confidentiality, integrity, and availability of the affected system. The high CVSS score reflects the severity of these impacts. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to vulnerable versions and applying best practices to limit file inclusion risks, such as validating and sanitizing input used in include/require statements. Monitor officialprocoders communications for updates on patches or mitigations.