CVE-2026-102790

CVSS 8.6 (high) · published 2026-10-28

Joomla Extension - icagenda.com - Stored XSS via url-type event Custom Field in iCagenda 3.2.1 to 4.0.16

Weakness: CWE-79

Source: NVD CVE-2026-102790

References

• https://www.icagenda.com/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.