icagenda.com iCagenda extension for Joomla

• CVE-2026-48939 Critical 10.0 Exploited Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15 20.1%
• CVE-2026-102790 High 8.6 Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 0.3%
• CVE-2026-102799 Medium 5.3 Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16 0.3%
• CVE-2026-75948 High 8.6 Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 0.4%
• CVE-2026-67366 Medium 5.3 Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 0.2%
• CVE-2026-71570 Medium 5.1 Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 0.4%
• CVE-2026-71571 High 8.6 Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 0.4%
• CVE-2026-67365 Critical 9.2 Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 0.4%