VULNERABILITY INTELLIGENCE
CVE-2026-75948
EPSS probability0.39%
CISA KEVNot currently listed
Published2026-08-20
Last modified2026-08-26
Description
Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 - The frontend "Submit an Event" form stores the `image` and `file` fields as raw strings with no output-side HTML-attribute escaping.
Weakness classification
- security@joomla.org: CWE-79