What is GHSA-4f62-78r3-84fq?

GHSA-4f62-78r3-84fq is a security advisory published by GitHub Security Advisories with Critical severity. Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form...

Which CVE IDs does GHSA-4f62-78r3-84fq cover?

GHSA-4f62-78r3-84fq covers the following CVE IDs: CVE-2026-65883. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-4f62-78r3-84fqCritical

Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form...

Vendor

GitHub Security Advisories

Published

July 29, 2026

Last Modified

July 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-65883 →

📋 Description

Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0 - A forged clfgd field allows PHP objection injection and thereby remote code execution.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-65883
https://www.aimy-extensions.com/joomla/captcha-less-form-guard.html
https://github.com/advisories/GHSA-4f62-78r3-84fq