vulnerability
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
Critical
Summary
Two zero-day vulnerabilities in Joomla extensions – iCagenda and Balbooa Forms – are being actively exploited in a global campaign targeting vulnerable CMS systems. Both flaws allow for remote code execution via file uploads, and CISA has added them to its Known Exploited Vulnerabilities (KEV) catalog. Federal Civilian Executive Branch (FCEB) agencies have a deadline to patch these issues, and the ACSC is warning of a broader campaign leveraging similar vulnerabilities across multiple CMS and plugins.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data