icagenda vulnerabilities

CVEs whose affected-version data names the icagenda package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-48939Critical· 9.8CISA KEVPoC

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

▾ Hadaljoomlic · icagendaEPSS 20%via NVD

icagenda vulnerabilities (CVEs) · VulnSea