Skip to content
OpenAdvisories

Vendor

icagenda.com

8 known vulnerabilities.

Products

iCagenda extension for Joomla 8
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-102799

    Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16

    Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16

    icagenda.com iCagenda extension for Joomla Web / CMS
  • Medium 5.3
    CVE-2026-67366

    Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11

    Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 - Multiple state changing operations in the frontend are callable without a CSRF token check.

    icagenda.com iCagenda extension for Joomla Web / CMS
  • Medium 5.1
    CVE-2026-71570

    Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11

    Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator granted access scoped to `com_icagenda` only could enumerate Joomla user profiles.

    icagenda.com iCagenda extension for Joomla Web / CMS