iCagenda Core 4.0.13 (Security Release) Stable
Release Notes 4.0.13
! Critical Security and bugfix Release.
# [SECURITY][CRITICAL][4.0.8-4.0.12][CVE-2026-XXXXX] Fixed (regression introduced in 4.0.8)
When the submit form is public; Stored (persistent) XSS in the frontend event-submission form.
NOTE: By default, the "Submit an Event" form in frontend is set to registered. This vulnerability is exploitable if the frontend form to submit an event is published and set to public access.
This vulnerability was responsibly reported by Akinlabi Omoogun of lulztigre.pw
I thank Akinlabi for reporting this issue and helping me improve the security of iCagenda.
~ Changed: Replace "text" type form fields (with a custom positive integer rule) with a "number" type field using the native Joomla rule.
# [LOW] Fixed: Events submitted in frontend not visible in admin list of events.
# [LOW][J6] Fixed: Date time format option broken in the Menu item option of type "List of Events".
Package iCagenda Core
| Downloaded | 21 times |
| File size | 2.11 Mb |
| Compatibility |
Announcement
• Removal of Joomla! 3 support.
• Compatible installation/upgrade from Joomla! 4 to Joomla! 6. This is a multi-platform version.
Requirements
• Joomla! 4.2 as minimum version required.
• PHP 8.0+ recommended (minimum 7.2.5).
• System requirements for databases and web servers; identical to those of Joomla:
https://manual.joomla.org/docs/next/get-started/technical-requirements/
Full Compatibility Joomla! 6
• This version can run without the need to enable the compatibility plugin.
Admin Relaunch
• New admin Interface.
• Improved Dashboard.
• Light/Dark Mode support in iCagenda administration.
• Code migration and refactory.
New Calendar Module
• A modern and accessible design with improved performance!
• This module displays an interactive calendar for iCagenda events.
• It uses modern techniques such as data loading via Fetch API requests.
• In addition, accessibility is optimally considered through semantic HTML, natural keyboard navigation, and integration with the WCAG 2 standard.
Key Features 4.0
• [PRO] Updated and improved PayPal plugin integrating API v2.
• [PRO] New Payment view for a better UX and integration of the payment buttons.
• [PRO] Options to show/hide custom fields in frontend list of participants (with access control).
• [PRO] Display Register button in component list of events and new Calendar module.
• [PRO] Display Registrations info in component list of events and new Calendar module.
• [PRO] Custom Fields frontend display and access options for both event information and list of participants.
• [PRO] Advanced options in new Calendar module.
• [LEGACY] Deprecated calendar module and search plugin updated only if previous iCagenda version prior to version 4.0. Not installed on new fresh install.
• Refactory and new layout for the List of Participants.
• Plugin Smart Search (finder) is now available in both free and pro versions.
• Removal of all out-dated code used by versions prior to Joomla 4.
Numerous improvements
• Replacement of deprecated methods, performance enhancements, and so much more!