Description
Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 - The frontend "Submit an Event" form stores the `image` and `file` fields as raw strings with no output-side HTML-attribute escaping.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| icagenda.com | iCagenda extension for Joomla | 4.0.8-4.0.12 | — |
References
- https://www.icagenda.com/ product