Total
5 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-21625 | 1 Stackideas | 1 Easydiscuss | 2026-01-30 | N/A | 8.8 HIGH |
| User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no mime type checks are happening. | |||||
| CVE-2026-21624 | 1 Stackideas | 1 Easydiscuss | 2026-01-30 | N/A | 5.4 MEDIUM |
| Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla. | |||||
| CVE-2026-21623 | 1 Stackideas | 1 Easydiscuss | 2026-01-30 | N/A | 5.4 MEDIUM |
| Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla. | |||||
| CVE-2023-51810 | 1 Stackideas | 1 Easydiscuss | 2025-06-20 | N/A | 7.5 HIGH |
| SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module. | |||||
| CVE-2018-5263 | 1 Stackideas | 1 Easydiscuss | 2024-11-21 | 3.5 LOW | 5.4 MEDIUM |
| The StackIdeas EasyDiscuss (aka com_easydiscuss) extension before 4.0.21 for Joomla! allows XSS. | |||||