This vulnerability in designthemes Red Art (<= 3.8) is caused by unsafe deserialization of untrusted data, enabling object injection attacks. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, requiring low privileges but no user interaction, and resulting in high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided, and the product is not a cloud service.

Successful exploitation can lead to full compromise of the affected system's confidentiality, integrity, and availability. This means attackers could execute arbitrary code, manipulate data, or disrupt service. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid processing untrusted serialized data in Red Art and consider applying application-level controls to restrict or validate input. Monitor vendor channels for updates.