Vulnerability Intelligence Report
Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16
CVE-2026-102799
Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16
No Active Exploit Signals
CVSS Base Score
5.3
MEDIUM
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-1236 ↗CWE-1236 Improper Neutralization of Formula Elements in a CSV File
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| icagenda.com | iCagenda extension for Joomla | 3.5.0-4.0.16 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Joomla! Project · Vendor · USA |
| Reserved | 2026-09-29T17:08:03 |
| Published | 2026-10-28T11:53:05 |
| Last Updated | 2026-10-28T11:53:05 |
Community Chatter & Buzz