VulnSocial

CVE-2026-58077Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 - The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS. A specially crafted unauthenticated request may result in website takeover under some circumstances.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-15: 2Patch / Workaround · 2026-07-15: 1Technical Details · 2026-07-15: 207-15
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
Full discourse2 posts
  • Manage Multiple WordPress and Joomla Sites easily!@mysitesguru
    Patch

    Sites running Weeblr's 4Analytics extension below version 5.0.2 are now flagged as vulnerable. Two unauthenticated stored XSS flaws (CVE-2026-58077 and CVE-2026-57833) can lead to a full site takeover, and an attacker does not need to be logged in to exploit them. Update to 4Analytics 5.0.2, released 15 July 2026. https://weeblr.com/blog/critical-vulnerabilities-2026-07-15

    Post summary

    Sites using Weeblr 4Analytics below 5.0.2 are vulnerable to unauthenticated stored XSS that can enable complete site takeover; updating to 5.0.2 released on 15 July 2026 mitigates the issue.

    00010101
    2.6K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-58077 The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS. A specially crafted unauthenticated request may result in website takeover under some … https://www.cve.org/CVERecord?id=CVE-2026-58077

    Post summary

    CVE-2026-58077 is a stored XSS vulnerability in the Joomla extension 4Analytics that can be triggered by an unauthenticated request, potentially allowing an attacker to take over the website.

    00000601
    57.8K followersView on X

Explore more

Back to dashboard