A PHP Object Injection vulnerability exists in the Product Catalog Feed component of PixelYourSite versions up to and including 3.1.4. This vulnerability allows an attacker with high privileges to execute arbitrary code or cause denial of service via crafted input. The flaw is identified as CWE-502 and has a CVSS 3.1 base score of 7.2, indicating a high severity impact.