CVE-2026-21626criticalCWE-200

CVE-2026-21626: falha crítica em Stackideas.com EasyDiscuss extension for Joomla

Extension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for Joomla

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar EasyDiscuss extension for Joomla

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.2epss 0.4%
Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Produtos afetados
Stackideas.com · EasyDiscuss extension for Joomla
CVEs relacionadas — Stackideas.com EasyDiscuss extension for Joomla

No mesmo produto, das mais perigosas para as menos.

CVE-2026-21625MEDIUMExtension - stackideas.com - Lack of mime type validation in EasyDiscuss component 1.0.0-5.0.15 for JoomlaEPSS 0.4%CVE-2026-21624CRITICALExtension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for JoomlaEPSS 0.2%CVE-2026-21623CRITICALExtension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for JoomlaEPSS 0.2%