This vulnerability involves deserialization of untrusted data in the Stylemix uListing plugin (versions up to 2.2.0). An attacker with network access and low privileges can exploit this flaw to perform object injection, potentially leading to complete compromise of the affected system's confidentiality, integrity, and availability. The CVSS v3.1 base score is 8.8, reflecting high severity with network attack vector, low attack complexity, and no user interaction required.

Successful exploitation can lead to full compromise of the affected system, including unauthorized disclosure, modification, or destruction of data and disruption of service. The vulnerability affects all versions of uListing up to and including 2.2.0. No known exploits are reported in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected application and monitor for suspicious activity related to deserialization attempts. Avoid using vulnerable versions of the uListing plugin in production environments if possible.