EasyDiscuss extension for Joomla vulnerabilities

2 known vulnerabilities in EasyDiscuss extension for Joomla from Stackideas.com. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  EasyDiscuss extension for Joomla: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-21626Feb 6, 2026Stackideas.com

  Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure

• 8.8 High severity

  EasyDiscuss extension for Joomla: Unrestricted Upload of File with Dangerous Type

  CVE-2026-21625Jan 16, 2026Stackideas.com

  User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no mime type checks are happening.