CVE-2026-71570

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 PUBLISHED

Description (CNA)

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator granted access scoped to `com_icagenda` only could enumerate Joomla user profiles.

Affected (CNA)

Vendor / product	Versions
icagenda.com / iCagenda extension for Joomla	affected 4.0.0-4.0.11

CWE

CWE-284

References

https://www.icagenda.com/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.