Filtered by vendor Stackideas Subscriptions
Filtered by product Easydiscuss Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-21623 1 Stackideas 1 Easydiscuss 2026-01-19 N/A
Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla.
CVE-2026-21625 2 Joomla, Stackideas 3 Joomla, Joomla!, Easydiscuss 2026-01-19 N/A
User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no mime type checks are happening.
CVE-2026-21624 2 Joomla, Stackideas 3 Joomla, Joomla!, Easydiscuss 2026-01-19 N/A
Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla.
CVE-2023-51810 1 Stackideas 1 Easydiscuss 2025-06-20 7.5 High
SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module.
CVE-2018-5263 1 Stackideas 1 Easydiscuss 2024-11-21 N/A
The StackIdeas EasyDiscuss (aka com_easydiscuss) extension before 4.0.21 for Joomla! allows XSS.