PRODUCT PROFILE

iCagenda

Created from vulnerability 18512 relation agent

关联漏洞

共找到 1 条公开漏洞记录

严重CVE-2026-48939远程代码执行2026/09/30KEV

Joomla iCagenda < 3.9.10 - Unauthenticated Arbitrary File Upload RCE

iCagenda extension for Joomla contains an unrestricted file upload vulnerability in the file attachment feature, letting attackers upload and execute arbitrary PHP code, exploit requires no special privileges.

PoC 已收录RCEiCagenda

CVSS10.0EPSS 20.1%