iCagenda CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH iCagenda CVE published 2026-10-28

CVE-2026-102790

A stored XSS vulnerability exists in the iCagenda Joomla extension from version 3.2.1 to 4.0.16 via a url-type event custom field. This issue has a CVSS score of 8.6, indicating high severity. The vulnerability allows attackers to inject malicious content, potentially impacting user sessions or data. Defenders should assess exposure and prioritize patching or mitigation. The iCagenda extension is widely u [truncated]