PT-2021-23427

Name of the Vulnerable Software and Affected Versions Fathom Analytics WordPress plugin versions up to and including 3.0.4 Description The issue arises from insufficient input validation and escaping via the site id parameter in the /fathom-analytics.php file, allowing attackers with administrati...

CVE-2021-41836: Improper Neutralization of Input During Web Page Generation

The Fathom Analytics WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the $siteid parameter found in the /fathom-analytics.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versio...