medium4.3
CVE-2013-1844
Piwik (now Matomo) Vulnerable to Cross-Site Scripting (XSS)
Impact
Cross-site scripting (XSS) vulnerability in Piwik before 1.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | matomo/matomo | < 1.11 | 1.11 |
| composer | piwik/piwik | < 1.11 | 1.11 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Matomo | Matomo | through 1.10.1 Versions 1.0, 1.1, 1.1.1, 1.2, 1.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://piwik.org/blog/2013/03/piwik-1-11/
- http://www.openwall.com/lists/oss-security/2013/03/12/4
- https://github.com/advisories/GHSA-5fpj-6vq6-fmwh
- https://nvd.nist.gov/vuln/detail/CVE-2013-1844
- https://web.archive.org/web/20130313093839/http://piwik.org/blog/2013/03/piwik-1-11