Security Advisory

CVE-2026-67365

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-14 20:02:34
Last updated 2026-08-18 07:55:07
Assigner Joomla
CVSS score 9.2
State PUBLISHED

Description

Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injection in mod_icagenda_calendar (iCagenda), reachable via com_ajax with no session, token or account.