CVE-2026-54857 Unauthenticated PHP Object Injection in Quirky <= 1.23 versions

Description

Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.

Affected products and versions

Product	Affected versions	Fixed in
Quirky 1.23	earliest → 1.23	No fix stated

Other CVEs of Quirky

The 2 CVEs of Quirky →

CVE-2025-69148 Unauthenticated Local File Inclusion in Quirky <= 1.23 versions 8.1 High