Advisories · Technology
icagenda.com iCagenda extension for Joomla.
Every CVE that names icagenda.com iCagenda extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12
- icagenda.com iCagenda extension for Joomla
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16
- icagenda.com iCagenda extension for Joomla
- Other injection
- CVSS 8.6 High
Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12
- icagenda.com iCagenda extension for Joomla
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11
- icagenda.com iCagenda extension for Joomla
- Cross-site request forgery (CSRF)
- CVSS 5.1 Medium
Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11
- icagenda.com iCagenda extension for Joomla
- Broken access control
- CVSS 8.6 High
Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11
- icagenda.com iCagenda extension for Joomla
- SQL injection
- CVSS 9.2 CriticalCritical · CVSS 9+
Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11
- icagenda.com iCagenda extension for Joomla
- SQL injection
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15
- icagenda.com iCagenda extension for Joomla
- Unrestricted file upload