Persistent XSS Vulnerability in Easy Discuss Component for Joomla
CVE-2026-21623

9.4CRITICAL

Key Information:

Vendor

Stackideas.com

Status
Easydiscuss Extension For Joomla
Vendor
CVE Published:
16 January 2026

What is CVE-2026-21623?

The Easy Discuss component for Joomla is susceptible to a persistent cross-site scripting (XSS) vulnerability due to inadequate input filtering in its forum post functionality. This flaw allows an attacker to inject malicious scripts, which are then executed in the context of users who view the affected posts, potentially leading to unauthorized access or data manipulation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

EasyDiscuss extension for Joomla 1.0.0-5.0.15

References

https://stackideas.com/easydiscuss
product

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

adibou
Swiss Paraplegic Research
JSON
.