Vendor
Paytium versions from n/a through 5.0.5 contain a Deserialization of Untrusted Data vulnerability that allows for Object Injection.