This vulnerability in Secudeal Payments for Ecommerce arises from unsafe deserialization of untrusted data, enabling object injection attacks. It affects all versions up to and including 1.1. The CVSS 3.1 base score is 8.6, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality (high), integrity (low), and availability (low). No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation could allow an attacker to inject malicious objects via deserialization, potentially compromising sensitive data (high confidentiality impact), causing limited integrity and availability issues. However, no known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting or validating inputs that are deserialized to mitigate risk.