PT-2026-51137 · Icagenda.Com · Icagenda Extension For Joomla

Phil Taylor · Publicado 2026-06-20 · Atualizado 2026-06-20 · CVE-2026-48939

Mitre

CVSS v4.0

10

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2026-48939

Produtos afetados

Icagenda Extension For Joomla

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-48939 · Nota de Segurança
• https://icagenda.com · Nota