CVE-2021-41836
CVE-2021-41836 details a Stored Cross-Site Scripting vulnerability in the WordPress Fathom Analytics plugin. The issue stems from insufficient input validation/escaping of the $site_id parameter in the file ~/fathom-analytics.php, exploitable by an attacker with administrative access to inject ar...