CVE-2026-71571: Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11
Published Aug 14, 2026
·Updated
Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda could inject SQL.
Affected Software
1 affected component
Joomla Extension icagenda.com (iCagenda)<2.0.0-4.0.11
Event History
Aug 14, 2026
CVE Published
via MITRE·08:06 PM
Data Sourced
via MITRE·08:06 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-71571?
CVE-2026-71571 has a risk rating of 44, indicating a significant security vulnerability.
2
How do I fix CVE-2026-71571?
To fix CVE-2026-71571, update the iCagenda extension to version 2.0.0-4.0.11 or later.
3
Who is affected by CVE-2026-71571?
Backend operators with permission to access iCagenda are affected by CVE-2026-71571.
4
What type of vulnerability is CVE-2026-71571?
CVE-2026-71571 is classified as an SQL injection vulnerability.
5
What can an attacker do with CVE-2026-71571?
An attacker could exploit CVE-2026-71571 to inject malicious SQL queries via unescaped numeric filters.