This vulnerability in BoldThemes Goldenblatt (versions before 1.3.0) arises from unsafe deserialization of untrusted data, enabling an attacker to perform object injection. Exploitation can result in full system compromise due to the ability to execute arbitrary code or manipulate application logic. The CVSS 3.1 score of 9.8 reflects the critical nature of this vulnerability, with an attack vector over the network, no required privileges or user interaction, and complete impact on confidentiality, integrity, and availability.

Successful exploitation can lead to full compromise of the affected system, including unauthorized disclosure of information, modification of data, and disruption of service. Given the critical CVSS score and the nature of the vulnerability, the impact is severe.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid exposing vulnerable versions to untrusted networks and monitor for updates from BoldThemes regarding patches or mitigations.