CyberRota Analysis
AI-GeneratedThe T4 Page Builder extension for Joomla versions prior to 2.3.0 is vulnerable due to an open mail relay through its unauthenticated contact AJAX endpoint, allowing attackers to send emails with arbitrary content from the site's sender identity. This could lead to spam abuse, phishing attacks, or reputation damage for the affected site. Joomla site administrators using this extension should prioritize applying the update to mitigate potential exploitation.
Original NVD Description
Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension < 2.3.0 - The front-end JSON editor endpoint exposes an action called contact that requires no authentication, no CSRF token, no captcha (when no captcha plugin is enabled) and has no rate limiting. The attacker fully controls the recipient, subject and HTML body, and the mail is sent from the site's configured sender identity (mailfrom/fromname).