This vulnerability in BoldThemes Codiqa involves unsafe deserialization of untrusted data, which can lead to object injection attacks. Affected versions include all versions before 1.2.8. The CVSS 3.1 base score is 9.8, reflecting network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch links are currently available, and the product is not a cloud service.

Successful exploitation could allow an attacker to execute arbitrary code or manipulate application logic, resulting in full compromise of the affected system's confidentiality, integrity, and availability. Given the critical CVSS score, the impact is severe. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid using affected versions of BoldThemes Codiqa or apply any recommended temporary mitigations from the vendor. Monitor vendor channels for updates.