high8.8
CVE-2026-21625
User provided uploads to the Easy Discuss component for Joomla aren't properly validated.
Impact
User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no mime type checks are happening.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stackideas | Easydiscuss | from 1.0.0 through 5.0.15 |