CVE-2025-67997

Publication date

2026-02-20 15:46:33

Family

Patchstack

State

PUBLISHED

Description

Deserialization of Untrusted Data vulnerability in BoldThemes Travelicious travelicious allows Object Injection.This issue affects Travelicious: from n/a through < 1.6.7.