NetSight
critical9.8

CVE-2026-65883

Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0 - A forged clfgd field allows PHP objection i…

Impact

Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0 - A forged clfgd field allows PHP objection injection and thereby remote code execution.

Affected products

VendorProductAffected versions
Aimy-ExtensionsAimy Captcha-Less Form Guard
from 18.0 through 20.0

Weakness classification

References