CVE-2025-31084
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 1, 2025
Updated: Apr 3, 2025
CWE ID 502
Summary
CVE-2025-31084 is a Deserialization of Untrusted Data vulnerability affecting Sunshine Photo Cart versions from n/a to 3.4.10. An attacker can exploit this Object Injection flaw by deserializing untrusted data, potentially leading to arbitrary code execution. Successful exploitation could result in unauthorized access, data theft, or system compromise. Users are strongly advised to update their Sunshine Photo Cart installations as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Sunshinephotocart Sunshine Photo Cart