What’s Vulnerable › Vulnerabilities

CVE-2026-58077: Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2

• Severity: high (CVSS 8.7 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-15 · updated 2026-10-24
• Weakness: CWE-79

Description

Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 - The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS. A specially crafted unauthenticated request may result in website takeover under some circumstances.

Affected products

• weeblr.com 4Analytics extension for Joomla: 1.0-5.0.1

References

• https://weeblr.com/joomla-seo/4analytics-private-analytics-for-joomla

Get alerted when CVE-2026-58077 or the next vulnerability affects your stack