CVE-2026-65883

CVE-2026-65883 — Aimy Captcha-Less Form Guard = 20.0 Campo clfgd → Recuperación XOR → unserialize → FormattedtextLogger → RCE Resumen Inyección de objetos PHP no autenticada en Aimy Captcha-Less Form Guard para Joomla. El método onCheckAnswer decodifica en base64 el campo POST clfgd controlado po...

CVE-2026-65883 Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0

Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0 - A forged clfgd field allows PHP objection injection and thereby remote code execution...