CyberRota Analysis
AI-GeneratedThe Grav Form plugin versions 8.0.6 through 9.1.19 is vulnerable due to improper validation of reCAPTCHA responses, allowing attackers to bypass reCAPTCHA v3 protection by submitting a v3 token under a v2 field name. This vulnerability can lead to increased risk of automated bot attacks on sites relying on reCAPTCHA v3 for security. Organizations using affected versions of the plugin should prioritize updating to version 9.1.20 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Grav Form plugin (getgrav/grav-plugin-form) versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 field name (g-recaptcha-response instead of token), causing validation to use the v2 branch, which never applies the score threshold or verifies the expected action. This results in a complete bypass of reCAPTCHA v3 bot protection. The issue is fixed in version 9.1.20.