FundEngine PHP Object Injection

FundEngine, a PHP-based e-commerce platform, is affected by an unauthenticated PHP Object Injection vulnerability in versions up to 1.7.9.

Exploiting this issue could allow an attacker to inject malicious PHP objects, leading to remote code execution.