CISA ALERTS ON ACTIVE RCE EXPLOITS IN JOOMLA EXTENSIONS

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of actively exploited remote code execution vulnerabilities in two popular Joomla extensions. Attackers are leveraging arbitrary file upload flaws in iCagenda and Balbooa Forms to gain unauthorized access to affected systems.