August 15, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-67365NVD

Vulnerability Summary

Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injection in mod_icagenda_calendar (iCagenda), reachable via com_ajax with no session, token or account.
Severity Level
CRITICAL(9.2)
Published Date
Aug 14, 2026
Last Modified
Aug 14, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
N/A
CVSS v4.0 Base Metrics

External References