stackideas records

9 published records for vendor stackideas.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
37Monitor	CVE-2026-21623No exploit	Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomlastackideas · easydiscuss · CWE-79 XSS	Critical9.4	—	0.2%	Jan 16, 2026
37Monitor	CVE-2026-21624No exploit	Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomlastackideas · easydiscuss · CWE-79 XSS	Critical9.4	—	0.2%	Jan 16, 2026
36Monitor	CVE-2026-21626No exploit	Extension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for Joomlastackideas · easydiscuss · CWE-200 Pre-auth Info leak	Critical9.2	—	0.4%	Feb 6, 2026
30Monitor	CVE-2023-51810Proof of concept	SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive informationstackideas · easydiscuss · CWE-89 Pre-auth SQL injection	High7.5	—	1.1%	Jan 15, 2024
25Monitor	CVE-2015-7324No exploit	Multiple cross-site scripting (XSS) vulnerabilities in helpers/comment.php in the StackIdeas Komento (com_komento) component before 2.0.5 fostackideas · komento · CWE-79 Pre-auth XSS	Medium6.1	—	1.8%	Dec 27, 2017
21Monitor	CVE-2018-5263Proof of concept	The StackIdeas EasyDiscuss (aka com_easydiscuss) extension before 4.0.21 for Joomla! allows XSS.stackideas · easydiscuss · CWE-79 XSS	Medium5.4	—	1.6%	Jan 8, 2018
19Monitor	CVE-2026-21625No exploit	Extension - stackideas.com - Lack of mime type validation in EasyDiscuss component 1.0.0-5.0.15 for Joomlastackideas · easydiscuss · CWE-434 File upload	Medium4.8	—	0.4%	Jan 16, 2026
18Monitor	CVE-2014-0793Proof of concept	Multiple cross-site scripting (XSS) vulnerabilities in the StackIdeas Komento (com_komento) component before 1.7.3 for Joomla! allow remote stackideas · komento · CWE-79 Pre-auth XSS	Medium4.3	—	1.7%	Jan 30, 2014
17Monitor	CVE-2014-1837No exploit	Cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com_komento) component before 1.7.4 for Joomla! allows remote attackers stackideas · komento · CWE-79 Pre-auth XSS	Medium4.3	—	1.2%	Jan 30, 2014

CVE-2026-21623
37Monitor
Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla
CriticalCVSS 9.4No exploitEPSS 0%
- XSS
stackideas · easydiscussJan 16, 2026
CVE-2026-21624
37Monitor
Extension - stackideas.com - Persistent XSS in EasyDiscuss component 1.0.0-5.0.15 for Joomla
CriticalCVSS 9.4No exploitEPSS 0%
- XSS
stackideas · easydiscussJan 16, 2026
CVE-2026-21626
36Monitor
Extension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for Joomla
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Info leak
stackideas · easydiscussFeb 6, 2026
CVE-2023-51810
30Monitor
SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information
HighCVSS 7.5Proof of conceptEPSS 1%
- Pre-auth
- SQL injection
stackideas · easydiscussJan 15, 2024
CVE-2015-7324
25Monitor
Multiple cross-site scripting (XSS) vulnerabilities in helpers/comment.php in the StackIdeas Komento (com_komento) component before 2.0.5 fo
MediumCVSS 6.1No exploitEPSS 2%
- Pre-auth
- XSS
stackideas · komentoDec 27, 2017
CVE-2018-5263
21Monitor
The StackIdeas EasyDiscuss (aka com_easydiscuss) extension before 4.0.21 for Joomla! allows XSS.
MediumCVSS 5.4Proof of conceptEPSS 2%
- XSS
stackideas · easydiscussJan 8, 2018
CVE-2026-21625
19Monitor
Extension - stackideas.com - Lack of mime type validation in EasyDiscuss component 1.0.0-5.0.15 for Joomla
MediumCVSS 4.8No exploitEPSS 0%
- File upload
stackideas · easydiscussJan 16, 2026
CVE-2014-0793
18Monitor
Multiple cross-site scripting (XSS) vulnerabilities in the StackIdeas Komento (com_komento) component before 1.7.3 for Joomla! allow remote
MediumCVSS 4.3Proof of conceptEPSS 2%
- Pre-auth
- XSS
stackideas · komentoJan 30, 2014
CVE-2014-1837
17Monitor
Cross-site scripting (XSS) vulnerability in the StackIdeas Komento (com_komento) component before 1.7.4 for Joomla! allows remote attackers
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
stackideas · komentoJan 30, 2014