This vulnerability in axiomthemes 777 involves deserialization of untrusted data, which enables an attacker to perform object injection. This can lead to severe impacts including complete compromise of the affected system. The vulnerability affects all versions up to and including 1.13.0. The CVSS v3.1 base score is 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently provided.

Successful exploitation can result in full compromise of confidentiality, integrity, and availability of the affected system. Given the critical CVSS score and the nature of object injection via deserialization, attackers could execute arbitrary code or manipulate application logic remotely without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid processing untrusted serialized data in axiomthemes 777. Monitor vendor channels for updates and apply patches promptly once available.