Stackideas
Stackideas Easydiscuss: vulnerabilidades y CVE
Stackideas Easydiscuss tiene 6 vulnerabilidades publicadas, 4 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses4
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-21626 | Crítica (9.2) | 0.39% | — | 6 feb 2026 | Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure |
| CVE-2026-21625 | Media (4.8) | 0.39% | — | 16 ene 2026 | User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no mime type checks are happening. |
| CVE-2026-21624 | Crítica (9.4) | 0.20% | — | 16 ene 2026 | Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla. |
| CVE-2026-21623 | Crítica (9.4) | 0.20% | — | 16 ene 2026 | Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla. |
| CVE-2023-51810 | Alta (7.5) | 1.1% | — | 16 ene 2024 | SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module. |
| CVE-2018-5263 | Media (5.4) | 1.6% | — | 8 ene 2018 | The StackIdeas EasyDiscuss (aka com_easydiscuss) extension before 4.0.21 for Joomla! allows XSS. |