TI-2026-46831 CVE-2026-65697 · GHSA-4fpj-4rcv-h3hf
Fathom Lite 1.3.1 Stored XSS via /collect Endpoint
Priority MEDIUM 56
Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics collection endpoint that allows unauthenticated attackers to inject a javascript: URI into the Top Pages dashboard by supply…