Joomla extensions with perfect 10 CVSS scores exploited in the wild

Attackers are exploiting two critical vulnerabilities in iCagenda and Balbooa Forms extensions for Joomla, each carrying a CVSS score of 10. The flaws allow remote code execution on sites running the open-source CMS, which powers over a million websites globally. Administrators are urged to patch immediately.