{"affected":[{"defaultStatus":"unaffected","product":"iCagenda extension for Joomla","source":"CNA: Joomla","vendor":"icagenda.com","versions":[{"status":"affected","version":"3.5.0-4.0.16"}]}],"cveId":"CVE-2026-102799","cwes":["CWE-1236"],"description":"Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16","epss":{"date":"2026-11-06","percentile":0.21509,"score":0.00288},"exploits":[],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: Joomla","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L","version":"4.0"}],"modifiedAt":1793990240619,"publishedAt":1793188385596,"references":[{"source":"CNA: Joomla","tags":["product"],"url":"https://www.icagenda.com/"}],"remediation":[],"revision":"887e9988415186d849b6751f3bd4f190b62ee4b0d35e16170d21a1545b1c5dc4","sources":[{"modifiedAt":1793990240619,"name":"CNA: Joomla","retrievedAt":1793992129513,"url":"https://www.cve.org/CVERecord?id=CVE-2026-102799"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793992142268,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-102799"}],"ssvc":{"assessedAt":1793988903696,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16","updatedAt":1793992142268}