Persistent XSS Vulnerability in Easy Discuss Component for Joomla
CVE-2026-21624

9.4CRITICAL

Key Information:

Vendor

Stackideas.com

Status
Easydiscuss Extension For Joomla
Vendor
CVE Published:
16 January 2026

What is CVE-2026-21624?

The Easy Discuss component for Joomla is susceptible to a persistent cross-site scripting (XSS) vulnerability due to inadequate input filtering in user avatar text handling. This flaw allows an attacker to inject malicious scripts that are stored and executed within other users' browsers, potentially leading to unauthorized actions and data exposure. Implementing proper validation and sanitization practices is crucial to mitigate the risk posed by this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

EasyDiscuss extension for Joomla 1.0.0-5.0.15

References

https://stackideas.com/easydiscuss
product

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

adibou
Swiss Paraplegic Research
JSON
.