CVE-2026-62050 Unauthenticated PHP Object Injection in Splendour <= 1.23 versions

Description

Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.

Affected products and versions

Product	Affected versions	Fixed in
Splendour 1.23	earliest → 1.23	No fix stated

Other CVEs of Splendour

The 2 CVEs of Splendour →

CVE-2025-69396 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 8.1 High