CVE-2026-57833CWE-79cross-site-scripting

CVE-2026-57833

published July 15, 2026

CVSS

8.6

EPSS

Percentile

36.9

In the wild

Unconfirmed

What it is

Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 - The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS in relation to the AI analysis feature.

The record

Technical detail

CVSS: 8.6 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00436 · 36.9th percentile
Weakness: CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2026-07-15T14:16Z

References (1)

https://weeblr.com/joomla-seo/4analytics-private-analytics-for-joomla · [email protected]

EPSS history

Timeline

15 JUL 08:59Z
Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2
cvelistv5