TI-2021-18459 CVE-2021-41836 · GHSA-4rfr-wr94-r2xvFathom Analytics <= 3.0.4 Authenticated Stored Cross-Site ScriptingPriority LOW 23The Fathom Analytics WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the $site_id parameter found in the ~/fathom-analytics.php file which allowed attac…CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00583 · Published 2021-12-14 · No fix listed CWE-79