Lucene search
+L
ConvaFathom Analytics

1 matches found

CVE
CVE
added 2021/12/14 3:50 p.m.53 views

CVE-2021-41836

CVE-2021-41836 details a Stored Cross-Site Scripting vulnerability in the WordPress Fathom Analytics plugin. The issue stems from insufficient input validation/escaping of the $site_id parameter in the file ~/fathom-analytics.php, exploitable by an attacker with administrative access to inject ar...

4.8CVSS4.8AI score0.00565EPSS
Save