| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/piwik_pro | < 1.3.2 | 1.3.2 |
| piwik pro | < 1.3.2 | 1.3.2 |
This module enables you to add the Piwik Pro web statistics tracking system to your website.
The module does not check the JS code that is loaded on the website. So a user with the "Administer Piwik Pro" permission could configure the module to load JS from a malicious website.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer piwik pro" to access the settings form where this can be configured.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free