The vulnerability CVE-2024-54373 affects EduAdmin Booking by Chris Gardenberg and is characterized as a path traversal issue that enables PHP Local File Inclusion. This occurs due to improper restriction of pathname inputs, allowing an attacker with low privileges to include and execute local files on the server. The affected versions are up to and including 5.2.0. The CVSS 3.1 base score is 7.5, reflecting high impact on confidentiality, integrity, and availability, with network attack vector, high attack complexity, and no user interaction required.

Successful exploitation of this vulnerability could allow an attacker to read or execute arbitrary local files on the affected system, potentially leading to full compromise of the application and underlying server. The impact includes high confidentiality, integrity, and availability loss. There are no known exploits in the wild currently.

No official patch or remediation guidance is currently available from the vendor. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should consider restricting access to the affected application and monitor for suspicious activity related to file inclusion attempts.