CVE-2013-1844

Description

Cross-site scripting (XSS) vulnerability in Piwik before 1.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

How to fix CVE-2013-1844

To remediate CVE-2013-1844, upgrade the affected package to a fixed version below.

• Packagist/matomo/matomo—upgrade to 1.11 or later
• Packagist/piwik/piwik—upgrade to 1.11 or later

Is CVE-2013-1844 being exploited?

Low — EPSS is 0.9%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 1.11
• from 0, < 1.11

CVSS scores

References (4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2013-1844
• PATCHgithub.com/matomo-org/matomo
• WEBwww.openwall.com/lists/oss-security/2013/03/12/4
• WEBweb.archive.org/web/20130313093839/http://piwik.org/blog/2013/03/piwik-1-11