CyberRota Analysis
AI-GeneratedThe Joomla Extension used in SP Page Builder Pro versions 3.2.6 to 6.9.0 is vulnerable to an unauthenticated CAPTCHA bypass, allowing attackers to submit forms without valid CAPTCHA verification by manipulating the view_type parameter. This flaw affects the ajax_contact, optin_form, and form_builder addons, potentially leading to spam submissions or unauthorized actions on affected sites. Web administrators utilizing these addons should prioritize patching this vulnerability to safeguard against potential abuse.
Original NVD Description
Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 6.9.0 - In the ajax_contact, optin_form and form_builder addons, the result returned by the CAPTCHA plugin's onCheckAnswer event was discarded and replaced with a test for a non-empty string whenever the request-supplied view_type parameter equalled module. Submitting view_type=module together with any arbitrary token value therefore passed verification. This affected every instance of these addons placed inside an SP Page Builder module, irrespective of the CAPTCHA type configured for the site, and the view_type parameter was never validated against the context in which the form was actually rendered.