CVE-2026-71571

HighCVSS 8.6

Published: 14/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 15/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile - higher than 13% of all known CVEs

Summary

Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda could inject SQL.

Risk Assessment

An authenticated operator could inject SQL queries, potentially leading to unauthorized data access or modification.

Recommendation

Update the iCagenda extension to version 2.0.0-4.0.11 or later and restrict operator privileges.

Original NVD description (English source)

Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda could inject SQL.