CVE-2026-67366

Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 - Multiple state changing operations in the frontend are callable without a CSRF token check.

Score

CVSS 4.0 5.3 Medium

Status

Deferred - security@joomla.org

Published

2026-08-14

Last modified

2026-08-18

Weaknesses

CWE-352

Affected products

• Icagenda Extension For Joomla (Icagenda.com)

References

• https://www.icagenda.com/