Stackideas

9 CVEs across 2 Stackideas products. Browse Stackideas vulnerabilities, severities, and proof-of-concept exploits.

Stackideas products with known CVEs

ProductCVEs
Easydiscuss6
Komento3
Stackideas CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-21626High7.52026-02-06Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosure
CVE-2026-21625High8.82026-01-16User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no mime type checks ar…
CVE-2026-21624Medium5.42026-01-16Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla.
CVE-2026-21623Medium5.42026-01-16Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla.
CVE-2023-51810High7.52024-01-16SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted requ…
CVE-2018-5263Medium5.42018-01-08The StackIdeas EasyDiscuss (aka com_easydiscuss) extension before 4.0.21 for Joomla! allows XSS.
CVE-2015-7324Medium6.12017-12-27Multiple cross-site scripting (XSS) vulnerabilities in helpers/comment.php in the StackIdeas Komento (com_komento) component before 2.0.5 for Joomla! allow rem…
CVE-2014-18372014-01-30Cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com_komento) component before 1.7.4 for Joomla! allows remote attackers to inject arbitrary…
CVE-2014-07932014-01-30Multiple cross-site scripting (XSS) vulnerabilities in the StackIdeas Komento (com_komento) component before 1.7.3 for Joomla! allow remote attackers to inject…