This vulnerability in PEAKSEL D.O.O. NIS Animal Sounds and Ringtones v1.3.0 involves an arbitrary file overwrite through the file import process. Exploitation can result in overwriting critical internal files, which may lead to arbitrary code execution or exposure of sensitive information. The vulnerability is classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory). It is remotely exploitable without authentication or user interaction, making it highly critical. No official patch or vendor advisory has been provided to date.

Successful exploitation allows an unauthenticated attacker to overwrite critical internal files, potentially leading to arbitrary code execution and full compromise of the affected system. Confidentiality, integrity, and availability of the system are all severely impacted. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the file import functionality and monitor for suspicious activity related to file operations within the application.