CVE-2026-57833 is a high-severity vulnerability (CVSS 8.6) in the weeblr.com 4Analytics extension for Joomla, affecting versions 1.0 through 5.0.1. It is an unauthenticated stored cross-site scripting (CWE-79) flaw tied to the AI analysis feature, where input is not properly sanitized before being rendered in web pages. This allows remote attackers to inject and store malicious scripts that execute when other users access the affected content. The vulnerability does not require authentication and has high impact on confidentiality, integrity, and availability according to the CVSS vector. No official patch or remediation guidance is currently provided by the vendor.

Successful exploitation can lead to execution of arbitrary scripts in the context of users visiting the vulnerable Joomla site, potentially resulting in session hijacking, defacement, or other malicious actions. The vulnerability affects confidentiality, integrity, and availability of the affected system. Since it is unauthenticated, any remote attacker can exploit it without prior access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling or restricting access to the AI analysis feature in the 4Analytics extension to reduce exposure. Monitor for updates from weeblr.com regarding patches or official mitigations.