Description
Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator granted access scoped to `com_icagenda` only could enumerate Joomla user profiles.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| icagenda.com | iCagenda extension for Joomla | 4.0.0-4.0.11 | — |
References
- https://www.icagenda.com/ product