4.8
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L
Description
User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no mime type checks are happening.
Basic Information
ID
CVE-2026-21625
Source
Joomla
Published
Jan 16, 2026 at 15:06
Affected Product
Vendor
Stackideas.com
Product
EasyDiscuss extension for Joomla
Version
1.0.0-5.0.15
Affected Versions
Stackideas.com EasyDiscuss extension for Joomla 1.0.0-5.0.15