Skip to content
OpenAdvisories

Vendor

Stackideas.com

5 known vulnerabilities.

Products

EasyDiscuss extension for Joomla 4 Komento component for Joomla 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-21626

    Extension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for Joomla

    Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure

    Stackideas.com EasyDiscuss extension for Joomla Web / CMS
  • Critical 9.4
    CVE-2026-21624

    Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla

    Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla.

    Stackideas.com EasyDiscuss extension for Joomla Web / CMS
  • Critical 9.4
    CVE-2026-21623

    Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla

    Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla.

    Stackideas.com EasyDiscuss extension for Joomla Web / CMS
  • Critical 9.3
    CVE-2025-54294

    Extension - stackideas.com - SQLi vulnerability in Komento component 4.0.0-4.0.7 for Joomla

    A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered. The issue allows unprivileged users to execute arbitrary SQL commands.

    Stackideas.com Komento component for Joomla Web / CMS