32 matches found
PT-2023-24222 · André Bräkling · André Bräkling Wp-Matomo Integration
Name of the Vulnerable Software and Affected Versions: André Bräkling WP-Matomo Integration WP-Piwik plugin versions prior to 1.0.28 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For André...
WordPress plugin WP-Matomo Integration 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2022-33156
The matomointegration aka Matomo Integration extension before 1.3.2 for TYPO3 allows XSS...
CVE-2022-33156
The matomointegration aka Matomo Integration extension before 1.3.2 for TYPO3 allows XSS...
Cross site scripting
The matomointegration aka Matomo Integration extension before 1.3.2 for TYPO3 allows XSS...
CVE-2022-33156
The matomointegration aka Matomo Integration extension before 1.3.2 for TYPO3 allows XSS...
CVE-2022-33156
The CVE-2022-33156 entry concerns the matomo_integration (TYPO3) extension, with vulnerable versions prior to 1.3.2. Concrete details from connected sources indicate: (1) vulnerability is Cross-Site Scripting (XSS) due to improper encoding of user input in HTML output, (2) exploitation generally ...
PT-2022-21716 · Typo3 · Wp-Matomo Integration
Name of the Vulnerable Software and Affected Versions: matomo integration extension versions prior to 1.3.2 Description: The issue allows for XSS due to the extension's failure to properly encode user input for output in HTML context. A TYPO3 backend user account is required to exploit this issue...
WP-Matomo Integration (WP-Piwik) < 1.0.27 - Plugin Settings Reset via CSRF
The plugin does not have CSRF when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack https://example.com/wp-admin/options-general.php?page=wp-piwik%2Fclasses%2FWPPiwik.php&clear=2...
WP-Matomo Integration (WP-Piwik) < 1.0.27 - Plugin Settings Reset via CSRF
The plugin does not have CSRF when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack PoC https://example.com/wp-admin/options-general.php?page=wp-piwik%2Fclasses%2FWPPiwik.php=2...
WP-Piwik <= 1.0.10 - Unauthenticated Stored Cross-Site Scripting (XSS)
The WP-Matomo Integration WP-Piwik WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability...