This vulnerability in InspiryThemes Real Homes CRM allows an attacker with limited privileges to upload files of dangerous types without restriction. The affected versions include all versions up to and including 1.0.0. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, no user interaction, and complete impact on confidentiality, integrity, and availability. The vulnerability could allow execution of malicious code or other harmful actions via uploaded files. No patch or official fix information is currently available, and the product is not a cloud service, so remediation depends on vendor updates or user mitigation.

Successful exploitation could lead to full compromise of the affected system, including unauthorized disclosure, modification, or destruction of data, and disruption of service. The vulnerability affects confidentiality, integrity, and availability at a critical level. There are no known exploits in the wild currently, but the high severity indicates a significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting file upload permissions, implementing file type validation, or disabling file uploads if feasible. Monitor InspiryThemes advisories for updates and apply patches promptly once available.