This vulnerability in ThemeGoods Grand Restaurant allows an attacker to exploit deserialization of untrusted data, resulting in object injection. It affects all versions up to and including 7.0.10. The CVSS score of 9.8 reflects that the vulnerability is remotely exploitable without privileges or user interaction and can cause complete compromise of the system. No official patch or fix information is available at this time, and the product is not a cloud service.

Successful exploitation can lead to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability allows remote attackers to inject malicious objects via deserialization, potentially enabling arbitrary code execution or other severe impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the affected application and monitoring for suspicious activity related to deserialization inputs.