This vulnerability in Stylemix uListing (<= 2.2.0) is caused by unsafe deserialization of untrusted data, enabling an attacker with high privileges to perform object injection. The CVSS 3.1 base score is 7.2, reflecting network attack vector, low attack complexity, required high privileges, no user interaction, and high impact on confidentiality, integrity, and availability. No known exploits in the wild or vendor patches are currently documented.

Successful exploitation could allow an attacker with high privileges to inject malicious objects via deserialization, potentially leading to full compromise of the application’s confidentiality, integrity, and availability. The vulnerability is rated high severity due to these impacts. There is no information about active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to trusted users with high privileges and avoid processing untrusted serialized data in the affected versions. Monitor vendor channels for updates and apply patches promptly once released.