Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101684
HistoryDec 19, 2021 - 12:00 a.m.

WordPress Fathom Analytics plugin cross-site scripting vulnerability

2021-12-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.001 Low

EPSS

Percentile

19.4%

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The Fathom Analytics plugin is a WordPress open source application plugin. A cross-site scripting vulnerability exists in the WordPress Fathom Analytics plugin, which originates in the ~/fathom-analytics.php file The vulnerability is caused by insufficient validation of the $site_id parameter input in the ~/fathom-analytics.php file, which can be exploited by an attacker with administrative user access to inject arbitrary web scripts.

CPENameOperatorVersion
wordpress fathom analyticsle3.0.4

0.001 Low

EPSS

Percentile

19.4%

Related for CNVD-2021-101684