Stackideas Easydiscuss — known CVE vulnerabilities

Every CVE whose affected-product data names Stackideas Easydiscuss, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2026-21625 — CVSS 8.8 (high): User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no…
• CVE-2023-51810 — CVSS 7.5 (high): SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive…
• CVE-2026-21626 — CVSS 7.5 (high): Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an…
• CVE-2018-5263 — CVSS 5.4 (medium): The StackIdeas EasyDiscuss (aka com_easydiscuss) extension before 4.0.21 for Joomla! allows XSS.
• CVE-2026-21623 — CVSS 5.4 (medium): Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla.
• CVE-2026-21624 — CVSS 5.4 (medium): Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla.