CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu wdes-responsive-mobile-menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through <= 5.3.18.
Explanation of Vulnerability in Simple Terms
WDES Responsive Mobile Menu versions 5.3.18 and earlier contain a deserialization vulnerability that allows unauthenticated attackers to run arbitrary code on the site. The vulnerability requires no user interaction and can be exploited remotely over the network. All sites running affected versions should update immediately.
What an attacker can do
Run arbitrary code on the site without authentication.
Potential impact on your site
Complete compromise of the site, including data theft, malware injection, and site takeover.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
