Legend: !important+added-removed~changed#fixed iCagenda™ is distributed under the terms of the GNU General Public License version 3 or later; see LICENSE.txt.
Support for iCagenda core version 3.9 (the final version to support Joomla 3) ended on 13 October 2026; the free version has reached its end-of-life and will no longer receive any updates (as of 15 October 2025, this version had been receiving only security updates). Read More
Extended security support for the iCagenda PRO 3.9 version until October 13, 2027. To benefit from this extended support, you must have a Pro subscription: https://www.joomlic.com/extensions/icagenda
We strongly advise users who are still using Joomla! 3 to upgrade to Joomla! 5 and Joomla! 6 as soon as possible.
Joomla 3 reached its end-of-life in August 2023.
iCagenda 4.x still supports Joomla 4 as a minimum (though using Joomla 5 or 6 is highly recommended), even though Joomla 4.4 reached its end-of-life on October 17, 2025.
iCagenda 3.9.17 (2026.10.27) (Security Release)
!
High and medium Security Release.
#
[SECURITY][CVE-2026-102790][HIGHT] Fixed: Stored XSS via url-type event Custom Field.
#
[SECURITY][CVE-2026-102799][MEDIUM] Fixed: CSV formula injection in the registrations export.
These vulnerabilities were responsibly disclosed by Akinlabi Omoogun of lulztigre.pw.
I would like to thank Akinlabi for reporting these issues and for helping me strengthen the security of iCagenda.
