Yannick Gaultier

**Name of the Vulnerable Software and Affected Versions** 4Analytics (affected versions not specified) **Description** The Joomla extension 4Analytics contains a stored Cross-Site Scripting (XSS) flaw—a vulnerability where malicious scripts are permanently stored on the target server—associated with the AI analysis feature. This issue can be triggered by an unauthenticated user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** 4Analytics (affected versions not specified) **Description** The Joomla extension 4Analytics contains an unauthenticated stored Cross-Site Scripting (XSS) flaw. A stored XSS occurs when a malicious script is permanently stored on the target server, which is then served to other users. An unauthenticated request containing a specially crafted payload can lead to a full website takeover under certain conditions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.