← Database

CVE-2026-71570

N/A CVSS: N/A Published: 2026-08-14 Modified: 2026-08-17

Description

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator granted access scoped to `com_icagenda` only could enumerate Joomla user profiles.

Affected Platforms

Unknown

Weakness Type

CWE-284

References