Unrated severityNVD Advisory· Published Jul 29, 2026· Updated Jul 29, 2026

Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0

CVE-2026-65883

Description

Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0 - A forged clfgd field allows PHP objection injection and thereby remote code execution.

Affected products

Aimy Extensions.com/Aimy Captcha-Less Form Guardllm-create
Range: 18.0 - 20.0

Patches

Vulnerability mechanics

References

www.aimy-extensions.com/joomla/captcha-less-form-guard.htmlmitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000