Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2636▼ 212 respecto a la semana anterior
Críticas / altas1386▲ 155 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (9.2) | 0.39% | — | Stackideas Easydiscuss | 6/2/2026 | 17/6/2026 | Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure | |
| Analizada | Media (4.8) | 0.39% | — | Stackideas Easydiscuss | 16/1/2026 | 17/6/2026 | User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no mime type checks are happening. | |
| Analizada | Crítica (9.4) | 0.20% | — | Stackideas Easydiscuss | 16/1/2026 | 17/6/2026 | Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla. | |
| Analizada | Crítica (9.4) | 0.20% | — | Stackideas Easydiscuss | 16/1/2026 | 17/6/2026 | Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla. | |
| Modificada | Alta (7.5) | 1.1% | — | Stackideas Easydiscuss | 16/1/2024 | 9/7/2026 | SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module. | |
| Modificada | Media (5.4) | 1.6% | — | Stackideas Easydiscuss | 8/1/2018 | 17/6/2026 | The StackIdeas EasyDiscuss (aka com_easydiscuss) extension before 4.0.21 for Joomla! allows XSS. |