Approved changes feed: RSS · Atom

cpe:2.3:a:stackideas:easydiscuss:*:*:*:*:*:joomla\!:*:*

part: a version: * update: *

VendorStackideas (c203fb38-8385-5e29-9660-48898045fb0f)
ProductEasydiscuss (95ac9662-ca74-54ee-89eb-0ca1dceec9bf)
Edition*
Language*
Software edition*
Target softwarejoomla!
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21626 vulnerable 2026-06-08 07:49:16.622666 Extension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for Joomla
Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure
Published: 2026-02-06T07:49:42.606Z
Updated: 2026-02-20T14:23:01.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21625 vulnerable 2026-06-08 07:49:16.622320 Extension - stackideas.com - Lack of mime type validation in EasyDiscuss component 1.0.0-5.0.15 for Joomla
User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no mime type checks are happening.
Published: 2026-01-16T15:06:15.596Z
Updated: 2026-01-16T15:35:53.746Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21624 vulnerable 2026-06-08 07:49:16.621864 Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla
Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla.
Published: 2026-01-16T15:05:37.172Z
Updated: 2026-01-16T15:41:11.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21623 vulnerable 2026-06-08 07:49:16.621425 Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla
Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla.
Published: 2026-01-16T15:04:36.308Z
Updated: 2026-01-16T15:38:27.743Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51810 vulnerable 2026-06-08 06:17:54.061391 Details available
SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module.
Published: 2024-01-16T00:00:00.000Z
Updated: 2026-07-09T00:29:31.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5263 vulnerable 2026-06-08 05:11:50.532674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.