Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

iCagenda extension for Joomla — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in iCagenda extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

Vendor: icagenda.com

CVE IDTitleCVSSSeverityPublished
CVE-2026-67366 Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 CWE-352 5.3 Medium2026-08-14
CVE-2026-71570 Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 CWE-284 5.1 Medium2026-08-14
CVE-2026-71571 Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 CWE-89 8.6 High2026-08-14
CVE-2026-67365 Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 CWE-89 9.2 Critical2026-08-14
CVE-2026-48939 Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15 CWE-434 10.0 Critical2026-06-20

All 5 known CVE vulnerabilities affecting iCagenda extension for Joomla with full Chinese analysis, references, and POCs where available.