CyberRota Analysis
AI-GeneratedThe SP Page Builder Pro versions 5.1.4 to 6.9.0 contain a vulnerability in the optin_form addon that allows unauthenticated users to bypass CAPTCHA protections by manipulating request parameters. This flaw significantly undermines the effectiveness of CAPTCHA, enabling potential abuse such as spam submissions or automated attacks. Joomla administrators and developers using this extension should prioritize patching or mitigating this vulnerability to protect their sites from unauthorized access and abuse.
Original NVD Description
Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0 - The optin_form addon read the CAPTCHA type, the expected answer and the enabled flag from the request rather than from the stored addon configuration. Verification reduced to md5($captcha_question) != $captcha_answer with both operands supplied by the attacker, so any value passed.