All vulnerabilities

Servers and applications

CVE-2013-0194

Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0195.

Severity
Medium 6.1
Published
20 Nov 2019
Last changed
16 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.10.1
Sources
NVD

Affected software

SoftwareAffected versions
MatomoServers and applications · cpe:a:matomo:matomo
  • Every version before 1.10.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2013-0194
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2013-0194