GHSA-5fpj-6vq6-fmwhLow

Piwik (now Matomo) Vulnerable to Cross-Site Scripting (XSS)

Published
May 13, 2022
Last Modified
April 12, 2025

🔗 CVE IDs covered (1)

CVE-2013-1844 →

📋 Description

Cross-site scripting (XSS) vulnerability in Piwik before 1.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

🎯 Affected products2

  • composer/matomo/matomo:< 1.11
  • composer/piwik/piwik:< 1.11

🔗 References (4)