CSV Formula Injection Vulnerability in iCagenda Extension by Joomla
CVE-2026-102799

5.3MEDIUM

Key Information:

Vendor

Icagenda.com

Status
Icagenda Extension For Joomla
Vendor
CVE Published:
28 October 2026

What is CVE-2026-102799?

The iCagenda extension for Joomla is susceptible to a CSV formula injection vulnerability during the export of registrations. This flaw can potentially allow an attacker to manipulate exported CSV files, posing risks of executing arbitrary code if the file is opened in spreadsheet applications. Users and administrators of iCagenda versions 3.5.0 through 4.0.16 should take immediate precautions to secure their applications against potential exploitation.

Affected Version(s)

iCagenda extension for Joomla 3.5.0-4.0.16

References

https://www.icagenda.com/
product

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Akinlabi Omoogun of lulztigre.pw
.