Skip to content
OpenAdvisories

Vendor

usefathom

1 known vulnerabilities.

Products

fathom 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-65697

    Fathom Lite 1.3.1 Stored XSS via /collect Endpoint

    Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics collection endpoint that allows unauthenticated attackers to inject a javascript: URI into the Top Pages dashboard by supplying a crafted hostname and pathname to …

    usefathom fathom