The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity vulnerabilities affecting iCagenda and Balbooa Forms extensions for Joomla to…
Developer of the iCagenda extension for Joomla that released patches for CVE-2026-48939 in versions 4.0.8 and 3.9.15.
A Joomla extension for event calendar management, affected by CVE-2026-48939 allowing arbitrary file upload and remote code execution.
iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04…