Skip to content
OpenAdvisories

Vendor

Fathom Analytics

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.8

    Fathom Analytics <= 3.0.4 Authenticated Stored Cross-Site Scripting

    The Fathom Analytics WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the $site_id parameter found in the ~/fathom-analytics.php file which allowed attackers with administrative user access to…