This vulnerability in EmallShop (PressLayouts) arises from unsafe deserialization of untrusted data, leading to PHP Object Injection without requiring authentication. It affects EmallShop versions up to 2.4.21. Exploitation could result in full compromise of the affected system, impacting confidentiality, integrity, and availability. No official patch or remediation guidance is currently documented, and no known exploits are reported in the wild as of the publication date.

Successful exploitation can lead to remote code execution with no authentication required, resulting in complete compromise of the affected system's confidentiality, integrity, and availability. This poses a significant risk to systems running vulnerable versions of EmallShop.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable application and monitor for suspicious activity related to deserialization. Avoid exposing the application to untrusted networks if possible.