TastyIgniter deserialization injection vulnerability

TastyIgniter versions 4.4.5 and earlier contain a deserialization injection vulnerability. This flaw arises because setting values are not properly sanitized when stored; upon retrieval via getValueAttribute, they are deserialized, leading to PHP object injection. Attackers can submit a serialize...