Joomlic vulnerabilities
Published CVEs affecting Joomlic products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-48939
Critical · 9.8
KEV Urgent · 73 Public exploit CWE-434 Jun 20, 2026
iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.