This vulnerability in Fetch Designs Sign-up Sheets arises from insecure deserialization of untrusted data, enabling an attacker to perform object injection. The affected versions include all releases up to and including 2.3.2. Exploitation can be performed remotely without authentication or user interaction, resulting in complete compromise of the system's confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.8, reflecting the critical nature of this issue. No vendor advisory or patch links are currently available, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation allows an unauthenticated remote attacker to inject malicious objects via deserialization, potentially leading to full system compromise including data theft, modification, or denial of service. The vulnerability affects all users of Fetch Designs Sign-up Sheets up to version 2.3.2. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected application and monitor for unusual activity. Avoid processing untrusted serialized data if possible.