This vulnerability in axiomthemes m2 | Construction and Tools Store arises from unsafe deserialization of untrusted data, enabling object injection attacks. The affected versions are up to 1.1.2. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or remediation information is currently provided, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability can lead to complete system compromise, including unauthorized data access, modification, and denial of service. Given the critical CVSS score, the impact is severe, potentially allowing remote attackers to execute arbitrary code or manipulate application behavior without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is available, users should monitor vendor communications closely. Until a fix is released, consider restricting network access to the affected application and applying any available workarounds recommended by the vendor.