Vendor
Fathom Analytics
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 4.8
Fathom Analytics <= 3.0.4 Authenticated Stored Cross-Site Scripting
The Fathom Analytics WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the $site_id parameter found in the ~/fathom-analytics.php file which allowed attackers with administrative user access to…