A deserialization of untrusted data vulnerability in ThemeREX Royal Event allows object injection, potentially leading to full system compromise. The vulnerability affects versions up to 2.0. It has a critical CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.