PT-2025-14076 · Unknown · Sunshine Photo Cart
CVE-2025-31084
·
Published
2025-04-01
·
Updated
2025-04-01
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Sunshine Photo Cart versions 3.4.10 and earlier
Description
The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially be exploited, but no specific details about the estimated number of affected devices or real-world incidents are provided.
Recommendations
For versions 3.4.10 and earlier, update to a version that contains a fix for this issue, as no specific workaround or mitigation measures are mentioned.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sunshine Photo Cart