CVE-2026-67366 - Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11

Back Back to CVE browser

MEDIUM

Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11

Published Aug 14, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.21%

Description

Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 - Multiple state changing operations in the frontend are callable without a CSRF token check.

Affected products

Vendor Icagenda.com Product iCagenda extension for Joomla Default
unaffected
- Version
  2.0.0-4.0.11
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Icagenda.com

iCagenda extension for Joomla

unaffected

Version	Status	Constraints
2.0.0-4.0.11	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (1)

https://www.icagenda.com/
product

Link	Providers	Tags
https://www.icagenda.com/		product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Joomla

Published Aug 14, 2026

Updated Aug 18, 2026

Reserved Jul 29, 2026

Link CVE-2026-67366

CISA Vulnrichment

Updated Aug 17, 2026

NVD

Status Deferred

Modified Aug 26, 2026

Link CVE-2026-67366

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-67366