CVE-2013-0195

MEDIUM 6.1CVE-2013-0195 · Published 20/11/2019 · updated 16/06/2026

In short

CVE-2013-0195 is a MEDIUM (CVSS 6.1) vulnerability affecting matomo (matomo).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.2% of all vulnerabilities.
Fix: update to 1.10.1 or later.

Package	Affected versions	Patched versions
matomo matomo	`< 1.10.1`	`1.10.1`

Description

Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194.

References

openwall.com/lists/oss-security/2013/01/17/15 · Mailing List
matomo.org/changelog/piwik-1-10 · Release Notes
security-tracker.debian.org/tracker/CVE-2013-0195 · Third Party Advisory

More vulnerabilities in matomo

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

matomo

< 1.10.1

1.10.1

More vulnerabilities in matomo

See all →