critical9.2
CVE-2026-67365
Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injection in mod_icagenda_calendar (iCagenda),…
Impact
Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injection in mod_icagenda_calendar (iCagenda), reachable via com_ajax with no session, token or account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| ICagenda | ICagenda | before 4.0.0-4.0.11 |
Versions were read from the advisory text. No structured product data has been published for this record yet.