Boletines de Vulnerabilidades

CVE-2026-67366

   
Software afectado JOOMLA
 
Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 - Multiple state changing operations in the frontend are callable without a CSRF token check.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-67366