Threats tagged 'ghsa-hqcj-3w2m-259w'

A critical deserialization of untrusted data vulnerability (CWE-502) exists in Elextensions ELEX WordPress HelpDesk & Customer Ticketing System versions up to 3.3.9. This flaw allows object injection, potentially leading to full system compromise. The vulnerability has a CVSS 3.1 score of 9.8, indicating high impact on confidentiality, integrity, and availability. No patch or remediation details are provided in the available data.