This vulnerability in xtemos WoodMart (up to version 8.3.8) is caused by unsafe deserialization of untrusted data, enabling an attacker to perform object injection. The CVSS v3.1 base score is 8.1, indicating a high severity with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. The vulnerability allows remote attackers to potentially execute arbitrary code or cause denial of service by manipulating serialized objects processed by the application.

Successful exploitation can result in full compromise of the affected system, including unauthorized disclosure, modification, or destruction of data, and disruption of service. The high CVSS score reflects the critical nature of the impact on confidentiality, integrity, and availability. No known active exploits have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. In the meantime, restricting network access to the vulnerable application and avoiding processing untrusted serialized data may reduce exposure.