Tue. 15th October, 2019
It has been discovered that the extension "freeCap CAPTCHA" (sr_freecap) is susceptible to Remote Code Execution.
This is a companion discussion topic for the original entry at https://typo3.org/article/remote-code-execution-in-extension-freecap-captcha-sr-freecap/