Icagenda.com Icagenda Extension For Joomla
6 CVEs affecting Icagenda.com Icagenda Extension For Joomla. Latest disclosed: 2026-08-20. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-48939 | Critical | 9.8 | 2026-06-20 | A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code uplo… |
CVE-2026-75948 | | 2026-08-20 | Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 - The frontend "Submit an Event" form stores the `image` and `file` fie… | |
CVE-2026-71570 | | 2026-08-14 | Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator granted access scoped to `com_icagenda` on… | |
CVE-2026-67366 | | 2026-08-14 | Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 - Multiple state changing operations in the frontend are cal… | |
CVE-2026-71571 | | 2026-08-14 | Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 - Backend operators with permissions to… | |
CVE-2026-67365 | | 2026-08-14 | Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injection in mod_icagenda_calendar (iCagenda)… |