CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
What the vulnerability does
Deserialization of Untrusted Data vulnerability in UX-themes Flatsome | Multi-Purpose Responsive WooCommerce Theme.This issue affects Flatsome | Multi-Purpose Responsive WooCommerce Theme: from n/a through 3.17.5.
Explanation of Vulnerability in Simple Terms
Flatsome theme versions up to 3.17.5 contain a deserialization vulnerability in how they process untrusted data. An attacker can send a specially crafted request to execute arbitrary code on the site, read sensitive data, or disrupt service. No authentication or user interaction is required. The vulnerability affects the entire site and any connected systems.
What an attacker can do
Execute code on the site, read sensitive data, or disrupt service without authentication.
Potential impact on your site
Attackers can compromise your site, steal data, or take it offline without needing a user account.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
