XSS in Weeblr.com 4analytics Extension For Joomla
CVE-2026-58077
Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 - The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS. A specially crafted unauthenticated request may result in website takeover under some circumstances.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.004 (36.3th percentile) — read the EPSS interpretation.
Affected products
- Weeblr.com 4analytics Extension For Joomla — versions 1.0-5.0.1
Weakness classification (CWE)
References
- security@joomla.org (product)