Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-67366

Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11

Description

Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 - Multiple state changing operations in the frontend are callable without a CSRF token check.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

icagenda.com iCagenda extension for Joomla

Default version status: unaffected

  • 2.0.0-4.0.11affected

References