IE
Product
iCagenda extension for Joomla
On CISA KEVExploited in the wild
8
CVEs
1
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 2High 3Medium 3Low 0
Watch
Add iCagenda extension for Joomla to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48939 In wildKEV | 9.8 | Jun 20 | Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15 Affected: 3.2.1-4.0.7 |
| CVE-2026-67365 | 9.2 | Aug 14 | Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 Affected: 4.0.0-4.0.11 |
| CVE-2026-102790 New | 8.6 | Oct 28 | Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 Affected: 3.2.1-4.0.16 |
| CVE-2026-75948 | 8.6 | Aug 20 | Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 Affected: 4.0.8-4.0.12 |
| CVE-2026-71571 | 8.6 | Aug 14 | Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 Affected: 4.0.0-4.0.11 |
| CVE-2026-102799 New | 5.3 | Oct 28 | Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16 Affected: 3.5.0-4.0.16 |
| CVE-2026-67366 | 5.3 | Aug 14 | Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 Affected: 2.0.0-4.0.11 |
| CVE-2026-71570 | 5.1 | Aug 14 | Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 Affected: 4.0.0-4.0.11 |
Showing 8