icagenda.com iCagenda extension for Joomla vulnerabilities

8 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Exploited icagenda.com iCagenda extension for Joomla vulnerabilities

CVE-2026-48939 — iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

CVE-2026-102790 — Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 (CVSS 8.6)
CVE-2026-102799 — Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16 (CVSS 5.3)
CVE-2026-75948 — Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 (CVSS 8.6)
CVE-2026-71570 — Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 (CVSS 5.1)
CVE-2026-67366 — Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 (CVSS 5.3)
CVE-2026-71571 — Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 (CVSS 8.6)
CVE-2026-67365 — Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 (CVSS 9.2)
CVE-2026-48939 — iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability (CVSS 9.8) — exploited