EIP-2026-108930

This writeup describes a bypass vulnerability in the JQuery-Real-Person captcha plugin (v1.0.1) where the captcha validation can be circumvented by reusing a valid pair of captcha characters and their associated hash value. The attack leverages the lack of proper validation between the displayed captcha and the submitted value.