CVE-2026-58077 is an unauthenticated stored cross-site scripting vulnerability in the 4Analytics extension for Joomla, affecting versions 1.0 through 5.0.1. The vulnerability arises from improper neutralization of input during web page generation (CWE-79), allowing attackers to inject malicious scripts via crafted unauthenticated requests. This can potentially lead to website takeover scenarios depending on the context of exploitation. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

An attacker can exploit this vulnerability without authentication to inject and store malicious scripts in the affected Joomla extension. This may result in website takeover, compromising the confidentiality, integrity, and availability of the affected system. The high CVSS score reflects significant potential impact if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider applying temporary mitigations such as input validation or disabling the vulnerable extension if feasible. Monitor official channels from weeblr.com and Joomla for updates.