9.8
Critical
CVE-2026-27083 Deserialization of Untrusted Data vulnerability in ThemeREX Work & Travel Company work-travel-company allows Object…
Description
Deserialization of Untrusted Data vulnerability in ThemeREX Work & Travel Company work-travel-company allows Object Injection.This issue affects Work & Travel Company: from n/a through <= 1.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Work & Travel Company 1.2 | earliest → 1.2 | No fix stated |