CVE-2026-21624criticalCWE-79

CVE-2026-21624: falha crítica em Stackideas.com EasyDiscuss extension for Joomla

Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla

Publicada em

Seguir esta CVE+ Monitorar EasyDiscuss extension for Joomla

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.4epss 0.2%
Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Produtos afetados
Stackideas.com · EasyDiscuss extension for Joomla
CVEs relacionadas — Stackideas.com EasyDiscuss extension for Joomla

No mesmo produto, das mais perigosas para as menos.

CVE-2026-21626CRITICALExtension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for JoomlaEPSS 0.4%CVE-2026-21625MEDIUMExtension - stackideas.com - Lack of mime type validation in EasyDiscuss component 1.0.0-5.0.15 for JoomlaEPSS 0.4%CVE-2026-21623CRITICALExtension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for JoomlaEPSS 0.2%