CVE-2026-71571

The iCagenda Joomla extension prior to version 2.0.0-4.0.11 is vulnerable to an authenticated SQL injection due to an unescaped numeric filter, allowing backend operators with appropriate permissions to execute arbitrary SQL queries. This vulnerability poses a high risk as it can lead to unauthorized data access or manipulation within the database. Organizations using this extension should prioritize patching to mitigate potential exploitation.