← Back to CVE search

CVE-2026-48939

Description

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.

CVSS 9.8EPSS 82.501%Risk 8.26
View source
Published
2026-06-20 13:16:42
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H