CVE-2026-78527
Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions.
- Risk score
- 63/100
- CVSS
- 8.8 v3.1
- Published
- 30 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A high-severity PHP Object Injection vulnerability affects GS Testimonial Slider versions up to 3.3.10, allowing an attacker to potentially inject malicious PHP code, leading to code execution, data tampering, and arbitrary code execution.
- Affected
- {'products': ['GS Testimonial Slider'], 'packages': [], 'versions': ['<= 3.3.10']}
- Fix
- Upgrade to a version greater than 3.3.10
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 8.8 high
- On your watchlist: php
References
Original description
Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions.
Last activity 30 Oct 2026. Patch Forecast updates every hour.