PatchTheCVE: stackideashttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-21626: Access control settings for forum post custom fields are not applied to the JSON output type, leading to an AChttps://patchthecve.com/cve/CVE-2026-21626.htmlhttps://patchthecve.com/cve/CVE-2026-21626.htmlWed, 17 Jun 2026 10:18:49 +0000HIGH 7.5: Access control settings for forum post custom fields are not applied to the JSON output type, leading to an ACL violation vector an information disclosureCVE-2026-21625: User provided uploads to the Easy Discuss component for Joomla aren't properly validatedhttps://patchthecve.com/cve/CVE-2026-21625.htmlhttps://patchthecve.com/cve/CVE-2026-21625.htmlWed, 17 Jun 2026 10:18:49 +0000HIGH 8.8: User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads are purely checked by file extensions, no mime type checks are happening.CVE-2026-21624: Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Dhttps://patchthecve.com/cve/CVE-2026-21624.htmlhttps://patchthecve.com/cve/CVE-2026-21624.htmlWed, 17 Jun 2026 10:18:49 +0000MEDIUM 5.4: Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of the Easy Discuss component for Joomla.CVE-2026-21623: Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discusshttps://patchthecve.com/cve/CVE-2026-21623.htmlhttps://patchthecve.com/cve/CVE-2026-21623.htmlWed, 17 Jun 2026 10:18:49 +0000MEDIUM 5.4: Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the Easy Discuss component for Joomla.