iCagenda 4.0.17 Stable
Released on:
Tuesday, 27 October 2026 11:46
Release Notes 4.0.17
! High and medium Security Release.
# [SECURITY][CVE-2026-102790][HIGHT] Fixed: Stored XSS via url-type event Custom Field.
# [SECURITY][CVE-2026-102799][MEDIUM] Fixed: CSV formula injection in the registrations export.
1 These vulnerabilities were responsibly disclosed by Akinlabi Omoogun of lulztigre.pw.
1 I would like to thank Akinlabi for reporting these issues and for helping me strengthen the security of iCagenda.