Joomla Easy Discuss Component Upload Validation Vulnerability

Vulnerability

A vulnerability exists in the Easy Discuss component for Joomla, where user-uploaded files are not properly validated. The component only checks file extensions, lacking any verification of mime types. This oversight could potentially allow the upload of malicious files that could be executed or cause harm.

Impact

Exploitation of this vulnerability could lead to the upload of harmful files, which might be executed on the server or cause other types of damage, depending on the nature of the uploaded content.

Added: Jan 16, 2026, 3:18 PM
Updated: Jan 16, 2026, 3:58 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
0.6
exploitability
5.4
remediation
0.0
relevance
2.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.