aimy-extensions.com vulnerabilities and threats

A critical remote code execution vulnerability exists in the Aimy Captcha-Less Form Guard plugin for Joomla versions 18.0 through 20.0. This vulnerability arises from deserialization of untrusted data via a forged 'clfgd' field, enabling PHP object injection. The flaw allows unauthenticated attackers to execute arbitrary code on the affected system without user interaction.