Login Request a demo
MA
Product
Matomo
by Matomo · last CVE Feb 20, 2024
22
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities22In the news0Timeline
Severity mix
Critical 0High 0Medium 5Low 0
Severity
All severities22Critical0High0Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Matomo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-6923
6.1
1%
Feb 20
Matomo <= 4.15.3 - Reflected Cross-Site Scripting via idsite
Affected: before 5.0.1
CVE-2013-0195
6.1
1%
Nov 20
Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
Affected: before 1.10.1
CVE-2013-0194
6.1
1%
Nov 20
Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
Affected: before 1.10.1
CVE-2013-0193
6.1
1%
Nov 20
Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
Affected: before 1.10.1
CVE-2019-12215
4.3
1%
May 20
A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because…
Affected: 3.9.1
Showing 5