by Kastro
Paper/Archive/CVE-2026-21623

CVE-2026-21623

Stackideas.com EasyDiscuss extension for Joomla — Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla

EPSS 0.2%CVSS 9.4
critical.is priorityof 100
30
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 9.4.094 × 201.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla.

Affected

ProductAffectedFixed inSource
EasyDiscuss extension for Joomla1.0.0-5.0.15–CNA

Scores by source

Joomla (CNA)9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refstackideas.com/easydiscuss