An unauthenticated Cross Site Scripting (XSS) vulnerability exists in perfmatters versions up to and including 2.6.4. This vulnerability allows an attacker to execute malicious scripts in the context of a victim's browser without requiring authentication. The vulnerability is classified as CWE-79 and has a high severity rating based on available data.