9.4
/ 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Description
Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla.
AI Analysis
Persistent XSS vulnerability in EasyDiscuss component for Joomla due to lack of input filtering in user avatar text handling
Basic Information
ID
CVE-2026-21624
Source
Joomla
Published
Jan 16, 2026 at 15:05
Affected Product
Vendor
Stackideas.com
Product
EasyDiscuss extension for Joomla
Version
1.0.0-5.0.15
Affected Versions
Stackideas.com EasyDiscuss extension for Joomla 1.0.0-5.0.15
CWE Classification
AI Assessment
AI Score
9.4 / 10
AI Severity
Critical
Vendor
Stackideas.com
Product
EasyDiscuss extension for Joomla
Version
1.0.0-5.0.15