Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.

What to know

What it is

A high-severity PHP Object Injection vulnerability exists in 10Web Social Photo Feed versions up to 1.5.6. An attacker could exploit this to gain high privileges, perform arbitrary code execution, and achieve arbitrary access.

Affected

{'products': ['10Web Social Photo Feed'], 'packages': [], 'versions': ['<= 1.5.6']}

Fix

Upgrade to a version greater than 1.5.6

Exploitation

No known exploitation