The vulnerability CVE-2024-54285 affects SeedProd Pro up to version 6.18.13 and allows users with high privileges to upload files without proper restrictions on file types. This unrestricted file upload can include web shells, which attackers can use to execute arbitrary code on the web server. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to complete compromise of the affected web server, including unauthorized code execution, data theft, and service disruption. Because the vulnerability allows uploading web shells, attackers could maintain persistent access and control over the server environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the upload functionality to trusted users only and monitor for suspicious file uploads. Avoid exposing the upload feature to untrusted users. Follow vendor communications closely for updates on patches or official mitigations.