This vulnerability in ThemeREX Buisson arises from unsafe deserialization of untrusted data, leading to object injection attacks. The affected versions include all releases up to and including 1.1.11. The CVSS 3.1 score of 9.8 indicates that the vulnerability is remotely exploitable without privileges or user interaction and can result in complete compromise of the affected system's confidentiality, integrity, and availability. No patch or vendor advisory details are currently available to confirm remediation status.

Successful exploitation could allow an attacker to execute arbitrary code or manipulate application logic through object injection, potentially leading to full system compromise. The vulnerability affects all users running vulnerable versions of ThemeREX Buisson and poses a critical risk to affected environments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting access to the affected component to mitigate exposure. Monitor official ThemeREX communications for updates on patches or mitigations.