# Joomla iCagenda and Balbooa Forms Zero-Day Flaws Exploited

Security researchers report that two Joomla extensions, iCagenda and Balbooa Forms, contain critical flaws that are being actively exploited as zero-days. The vulnerabilities allow attackers to compromise websites running these components before patches are available. Joomla site administrators should urgently review their installed extensions and apply any available fixes.

**Importance:** 3/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/07/icagenda-and-balbooa-forms-joomla-flaws.html) — Mon, 13 Jul 2026 11:06:02 +0530