Drupal Umami Analytics versions before 1.0.1 contain a Cross-Site Scripting (XSS) vulnerability due to improper input neutralization during web page generation. This flaw allows an attacker with high privileges to inject malicious scripts without user interaction. The vulnerability is fixed in version 1.0.1.