This vulnerability in Icegram Express Pro (email-subscribers-premium component) allows an attacker to perform deserialization of untrusted data, resulting in object injection. The affected versions are all versions before 5.9.14. The CVSS 3.1 base score is 7.2, indicating high severity with network attack vector, low attack complexity, required high privileges, no user interaction, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch links are available to confirm remediation status.

Successful exploitation of this vulnerability could allow an attacker with high privileges to inject malicious objects via deserialization, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. This could result in unauthorized code execution or data manipulation within Icegram Express Pro environments running vulnerable versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected application to trusted users only and monitor for unusual activity related to deserialization processes. Avoid processing untrusted serialized data where possible.