Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

283 matches found

Prion
Prion•added 2019/11/20 3:15 p.m.•14 views

Cross site scripting

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0195...

4.3CVSS5.9AI score0.01161EPSS
Exploits0References3Affected Software1
Prion
Prion•added 2019/11/20 3:15 p.m.•13 views

Cross site scripting

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195...

4.3CVSS5.9AI score0.01161EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB•added 2019/11/20 3:15 p.m.•6 views

CVE-2013-0194

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0195...

6.1CVSS5.8AI score0.01161EPSS
Exploits0References5Affected Software1
ATTACKERKB
ATTACKERKB•added 2019/11/20 3:15 p.m.•4 views

CVE-2013-0195

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194...

6.1CVSS5.8AI score0.01161EPSS
Exploits0References5Affected Software1
Prion
Prion•added 2019/11/20 3:15 p.m.•11 views

Cross site scripting

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194...

4.3CVSS5.9AI score0.01161EPSS
Exploits0References3Affected Software1
CVE
CVE•added 2019/11/20 2:31 p.m.•54 views

CVE-2013-0195

The CVE-2013-0195 entry corresponds to a Cross-site Scripting (XSS) vulnerability in Matomo/Piwik prior to version 1.10.1. Connected sources attribute the issue to improper validation of client-side data, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. Th...

6.1CVSS5.9AI score0.01161EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist•added 2019/11/20 2:31 p.m.•16 views

CVE-2013-0195

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194...

5.9AI score0.01161EPSS
Exploits0References3
Debian CVE
Debian CVE•added 2019/11/20 2:31 p.m.•11 views

CVE-2013-0195

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194...

6.1CVSS6AI score0.01161EPSS
Exploits0
Debian CVE
Debian CVE•added 2019/11/20 2:30 p.m.•8 views

CVE-2013-0194

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0195...

6.1CVSS6AI score0.01161EPSS
Exploits0
CVE
CVE•added 2019/11/20 2:30 p.m.•53 views

CVE-2013-0194

CVE-2013-0194 is an XSS vulnerability in Matomo (formerly Piwik) before 1.10.1. The flaw allows remote attackers to inject arbitrary JavaScript/HTML via unspecified vectors, potentially impacting user sessions and data integrity. Multiple connected sources (CNVD entries and related CVEs) corrobor...

6.1CVSS5.9AI score0.01161EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist•added 2019/11/20 2:30 p.m.•21 views

CVE-2013-0194

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0195...

5.9AI score0.01161EPSS
Exploits0References3
Debian CVE
Debian CVE•added 2019/11/20 2:26 p.m.•14 views

CVE-2013-0193

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195...

6.1CVSS6AI score0.01161EPSS
Exploits0
CVE
CVE•added 2019/11/20 2:26 p.m.•54 views

CVE-2013-0193

CVE-2013-0193 describes a cross-site scripting (XSS) vulnerability in Piwik/Matomo prior to version 1.10.1. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The issue is cited as a distinct vulnerability from CVE-2013-0194 and CVE-2013-0195. Exploit...

6.1CVSS5.9AI score0.01161EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist•added 2019/11/20 2:26 p.m.•19 views

CVE-2013-0193

Cross-site Scripting XSS in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0194 and CVE-2013-0195...

5.9AI score0.01161EPSS
Exploits0References3
NVD
NVD•added 2019/09/20 4:15 p.m.•15 views

CVE-2015-9405

The wp-piwik plugin before 1.0.5 for WordPress has XSS...

6.1CVSS6.4AI score0.01493EPSS
Exploits0References3
Prion
Prion•added 2019/09/20 4:15 p.m.•18 views

Cross site scripting

The wp-piwik plugin before 1.0.5 for WordPress has XSS...

4.3CVSS7.2AI score0.01493EPSS
Exploits0References3Affected Software1
CVE
CVE•added 2019/09/20 3:16 p.m.•176 views

CVE-2015-9405

CVE-2015-9405 affects the WordPress plugin WP-Piwik (WP-Matomo Integration) prior to version 1.0.5, with a Cross-Site Scripting (XSS) vulnerability reported. The vulnerability is documented across multiple feeds (NVD/NIST, RH Red Hat advisory, OpenVAS/NASL listing, WPVulndb, CVE list) and is desc...

6.1CVSS6.3AI score0.01493EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist•added 2019/09/20 3:16 p.m.•18 views

CVE-2015-9405

The wp-piwik plugin before 1.0.5 for WordPress has XSS...

6.4AI score0.01493EPSS
Exploits0References3
Circl
Circl•added 2018/05/29 3:50 p.m.•2 views

CVE-2025-34104

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/piwiksuperuserpluginupload.rb 2025-10-23 21:13:04+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...

9.4CVSS5.6AI score0.01128EPSS
Exploits0References1
Veracode
Veracode•added 2017/07/29 12:28 p.m.•17 views

Cross-site Scripting (XSS)

Piwik is susceptible to cross-site scripting XSS attacks. The attacks exist because it does not sanitize the user-supplied input...

4.3CVSS5.4AI score0.00931EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder