VYPR

Fathom

by Usefathom

CVEs (1)

  • CVE-2026-65697Jul 23, 2026
    risk 0.00cvss epss 0.00

    Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics collection endpoint that allows unauthenticated attackers to inject a javascript: URI into the Top Pages dashboard by supplying a crafted hostname and pathname to the unauthenticated…