Skip to content
OpenAdvisories
Critical · 9.2 CVE-2026-21626 EUVD-2026-5682

Extension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for Joomla

Published Feb 6, 2026 · Updated Feb 20, 2026 · Assigned by Joomla

Description

Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure

Affected products

VendorProductAffectedFixed
Stackideas.com EasyDiscuss extension for Joomla 1.0.0-5.0.15 —

References