Threats tagged 'ghsa-6pp5-95cc-8f8m'

CVE-2026-78257 is a high severity vulnerability involving PHP Object Injection due to deserialization of untrusted data in the Booking and Rental Manager product by magepeopleteam. It affects versions up to and including 2.7.5. The vulnerability allows an attacker with network access and low privileges to execute arbitrary code, causing high impact on confidentiality, integrity, and availability.