Threats tagged 'ghsa-g7w9-6f5v-35q7'

A critical deserialization of untrusted data vulnerability (CWE-502) exists in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services affecting versions up to 1.0.20. This flaw allows object injection, potentially leading to full system compromise. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. No patch or remediation details are currently provided.