Education Center

An unauthenticated caller can reach deserialization of attacker-controlled data, allowing it to be interpreted as PHP objects. The export does not disclose the endpoint, parameter, deserialization function or a usable gadget chain. File access or code execution depends on reachable application classes and behavior; a complete code-execution chain is not established. Affected versions: <= 3.6.12. No fixed release is confirmed.

The supplied vector requires no attacker account. Attacker-controlled request input can be reflected into browser output without sufficient neutralization. When a victim interacts with the crafted request or response, script can execute under the site's origin. The export does not identify the endpoint, parameter, rendering function, output context or victim role. Victim interaction is required by the vector. The vector reports limited confidentiality impact, limited integrity impact, limited availability impact. Affected versions: <= 3.6.12. No fixed release is confirmed.

education is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account.