IE
Product
iCagenda extension for Joomla
by icagenda.com · last CVE Oct 28, 2026
On CISA KEVExploited in the wild
8
CVEs
1
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 2High 3Medium 3Low 0
Watch

Add iCagenda extension for Joomla to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102799
New
5.3–Oct 28
Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16
Affected: 3.5.0-4.0.16
CVE-2026-67366
5.3
0%
Aug 14
Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11
Affected: 2.0.0-4.0.11
CVE-2026-71570
5.1
0%
Aug 14
Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11
Affected: 4.0.0-4.0.11
Showing 3