iCagenda and Balbooa Forms Joomla Flaws Exploited as Zero-Days

CISA has added two maximum-severity zero-day vulnerabilities in Joomla extensions (iCagenda and Balbooa Forms) to its Known Exploited Vulnerabilities catalog, confirming active exploitation; the report urges immediate auditing of Joomla sites, applying patches or uninstalling affected plugins, deploying WAF protections, and monitoring logs/indicators for compromise using the provided detection commands.