Vendors / Stackideas.com Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 1
Exploited now Stackideas.com records in CISA KEV No Stackideas.com vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure
CVSS 4.0 CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00409 · Published 2026-02-06 · No fix listed CWE-200
Priority MEDIUM 42
Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla.
CVSS 4.0 CRITICAL 9.4· Network · Low privileges · User interaction · EPSS 0.00197 · Published 2026-01-16 · No fix listed CWE-79
Priority MEDIUM 42
Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla.
CVSS 4.0 CRITICAL 9.4· Network · Low privileges · User interaction · EPSS 0.00197 · Published 2026-01-16 · No fix listed CWE-79
Priority MEDIUM 41
SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01138 · Published 2024-01-16 · No fix listed CWE-89
Priority LOW 28
The StackIdeas EasyDiscuss (aka com_easydiscuss) extension before 4.0.21 for Joomla! allows XSS.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01581 · Published 2018-01-08 · No fix listed CWE-79
Priority LOW 22
User provided uploads to the Easy Discuss component for Joomla aren't properly validated.
CVSS 4.0 MEDIUM 4.8· Network · Low privileges · User interaction · EPSS 0.00385 · Published 2026-01-16 · No fix listed CWE-434
Open these records in search → All records by CVSS severity
4 1 5 0 0
THREATIST.IORead the docs