All 6 CVE vulnerabilities found in iCagenda extension for Joomla, with AI-generated Chinese analysis, references, and POCs.
Vendor: icagenda.com
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-75948 | Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 CWE-79 | 8.6 | High | 2026-08-20 |
| CVE-2026-67366 | Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 CWE-352 | 5.3 | Medium | 2026-08-14 |
| CVE-2026-71570 | Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 CWE-284 | 5.1 | Medium | 2026-08-14 |
| CVE-2026-71571 | Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 CWE-89 | 8.6 | High | 2026-08-14 |
| CVE-2026-67365 | Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 CWE-89 | 9.2 | Critical | 2026-08-14 |
| CVE-2026-48939 | Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15 CWE-434 | 10.0 | Critical | 2026-06-20 |
All 6 known CVE vulnerabilities affecting iCagenda extension for Joomla with full Chinese analysis, references, and POCs where available.