Lucene search
K

33 matches found

Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
added 2026/02/24 12:0 a.m.7 views

EasyDiscuss by Stackideas,, , SQL Injection

EasyDiscuss by Stackideas,, , SQL Injection...

5.9AI score
Exploits0Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/06 7:49 a.m.2 views

CVE-2026-21626 Extension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for Joomla

Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure...

9.2CVSS5.3AI score0.00016EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/06 7:49 a.m.23 views

CVE-2026-21626 Extension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for Joomla

Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure...

9.2CVSS0.00016EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/06 12:0 a.m.2 views

StackIdeas EasyDiscuss 信息泄露漏洞

StackIdeas EasyDiscuss is an extension of the StackIdeas company. StackIdeas EasyDiscuss has a vulnerability related to information leakage. This vulnerability arises from the fact that the access control settings for custom forum post fields are not applied to JSON output types, which may lead t...

9.2CVSS5.8AI score0.00016EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/06 12:0 a.m.2 views

PT-2026-6689

Name of the Vulnerable Software and Affected Versions EasyDiscuss affected versions not specified Description Access control settings for forum post custom fields are not enforced when data is output in JSON format. This results in an Access Control List ACL bypass, potentially leading to...

9.2CVSS5.4AI score0.00016EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/01/16 3:5 p.m.20 views

CVE-2026-21624 Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla

Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla...

9.4CVSS0.00016EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/16 3:5 p.m.4 views

CVE-2026-21624 Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla

Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla...

9.4CVSS5.8AI score0.00016EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/16 3:4 p.m.19 views

CVE-2026-21623 Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla...

9.4CVSS0.00016EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/16 3:4 p.m.2 views

CVE-2026-21623 Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla...

9.4CVSS5.9AI score0.00016EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/16 12:0 a.m.1 views

Stack Ideas EasyDiscuss Cross-Site Script Vulnerabilities

Stack Ideas EasyDiscuss is a Q&A and forum component provided by Malaysia-based Stack Ideas Company. Stack Ideas EasyDiscuss has a cross-site scripting vulnerability, which stems from the lack of input filtering in the handling of forum posts. This vulnerability may lead to storage-based cross-si...

9.4CVSS5.6AI score0.00016EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/16 12:0 a.m.1 views

Stack Ideas EasyDiscuss Code Issues and Vulnerabilities

Stack Ideas EasyDiscuss is a Q&A and forum component provided by the Malaysian company Stack Ideas. Stack Ideas EasyDiscuss has code vulnerabilities, which stem from improper file validation during user file uploads. This could lead to the upload of arbitrary files...

8.8CVSS6AI score0.00027EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/16 12:0 a.m.2 views

Stack Ideas EasyDiscuss Cross-Site Script Vulnerabilities

Stack Ideas EasyDiscuss is a Q&A and forum component provided by Malaysia-based Stack Ideas Company. Stack Ideas EasyDiscuss has a cross-site scripting vulnerability, which stems from insufficient input filtering in the processing of user avatar text. This vulnerability may lead to storage-based...

9.4CVSS5.6AI score0.00016EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-17045

Malware in sbrugna...

5.4CVSS5.4AI score0.00226EPSS
Exploits5References4
RedhatCVE
RedhatCVE
added 2025/05/23 4:59 a.m.9 views

CVE-2023-51810

SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module...

7.5CVSS7.4AI score0.06179EPSS
Exploits2References1
NVD
NVD
added 2024/01/16 1:15 a.m.20 views

CVE-2023-51810

SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module...

7.5CVSS7.5AI score0.06179EPSS
Exploits2References3
OSV
OSV
added 2024/01/16 1:15 a.m.1 views

CVE-2023-51810

SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module...

7.5CVSS5.9AI score0.06179EPSS
Exploits2References3
Prion
Prion
added 2024/01/16 1:15 a.m.10 views

Sql injection

SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module...

5CVSS7.6AI score0.06179EPSS
Exploits2References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/16 12:0 a.m.6 views

CVE-2023-51810

SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module...

7.5AI score0.06179EPSS
Exploits2References3
CNNVD
CNNVD
added 2024/01/16 12:0 a.m.5 views

StackIdeas EasyDiscuss Security Breach

StackIdeas EasyDiscuss is an extension from StackIdeas, Inc. A security vulnerability exists in StackIdeas EasyDiscuss version v.5.0.5, which stems from the presence of a SQL injection vulnerability that allows remote attackers to obtain sensitive information via a crafted request...

7.5CVSS7.5AI score0.06179EPSS
Exploits2References4
Cvelist
Cvelist
added 2024/01/16 12:0 a.m.16 views

CVE-2023-51810

SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module...

7.7AI score0.06179EPSS
Exploits2References3
Rows per page
Query Builder