Stackideas vulnerabilities
We track 3 vulnerabilities in Stackideas products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 6, 2026.
3vulnerabilities
0critical
3high
0exploited
7.9average CVSS score
Latest Stackideas vulnerabilities
- 7.5 High severity
EasyDiscuss extension for Joomla: Exposure of Sensitive Information to an Unauthorized Actor
Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure
- 8.8 High severity
EasyDiscuss extension for Joomla: Unrestricted Upload of File with Dangerous Type
User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no mime type checks are happening.
- 7.5 High severity
Easydiscuss: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module.