A Cross Site Scripting (XSS) vulnerability exists in StatCounter versions up to and including 2.1.1. This vulnerability allows an attacker with limited privileges to execute script code in the context of another user, potentially leading to information disclosure and integrity impacts. The vulnerability is classified as CWE-79 and has a medium severity rating based on available data.