icagenda.com vulnerabilities
8 published CVEs name icagenda.com among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 8
- Last 12 months
- 8
- Critical
- 2
- Known exploited
- 1
Critical 2High 3Medium 3Low 0Not scored 0
Known exploitedNewest addition to KEV first
- CVE-2026-48939
Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15
icagenda.com · iCagenda extension for Joomla
ExploitedCritical10.0
Newest CVEs
- CVE-2026-102790
Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12
icagenda.com · iCagenda extension for Joomla
High8.6 - CVE-2026-102799
Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16
icagenda.com · iCagenda extension for Joomla
Medium5.3 - CVE-2026-75948
Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12
icagenda.com · iCagenda extension for Joomla
High8.6 - CVE-2026-67366
Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11
icagenda.com · iCagenda extension for Joomla
Medium5.3 - CVE-2026-71570
Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11
icagenda.com · iCagenda extension for Joomla
Medium5.1 - CVE-2026-71571
Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11
icagenda.com · iCagenda extension for Joomla
High8.6 - CVE-2026-67365
Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11
icagenda.com · iCagenda extension for Joomla
Critical9.2 - CVE-2026-48939
Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15
icagenda.com · iCagenda extension for Joomla
ExploitedCritical10.0