Skip to content
Sign in
9.8 Critical

CVE-2025-69301 Deserialization of Untrusted Data vulnerability in ThemeGoods PhotoMe photome allows Object Injection.This issue affects…

Description

Deserialization of Untrusted Data vulnerability in ThemeGoods PhotoMe photome allows Object Injection.This issue affects PhotoMe: from n/a through <= 5.6.11.

Affected products and versions

Product Affected versions Fixed in
PhotoMe 5.6 earliest → 5.6.11 No fix stated

Other CVEs of PhotoMe

The 3 CVEs of PhotoMe →
CVE-2026-24949 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods PhotoMe… 7.1 High CVE-2026-24381 Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods PhotoMe photome allows Server Side Request Forgery.This… 5.4 Medium
Track this CVE