Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-zvwh-8431-f7a3

Summary

Piwik (now Matomo) Vulnerable to Cross-Site Scripting (XSS)
Cross-site scripting (XSS) vulnerability in Piwik before 1.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Aliases

alias	CVE-2013-1844

alias	GHSA-5fpj-6vq6-fmwh

Fixed_packages

url	pkg:composer/matomo/matomo@1.11
purl	pkg:composer/matomo/matomo@1.11
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:composer/matomo/matomo@1.11

url pkg:composer/piwik/piwik@1.11

purl pkg:composer/piwik/piwik@1.11

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4y2q-2re4-v3hx

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/piwik/piwik@1.11

url	pkg:deb/debian/matomo@0?distro=trixie
purl	pkg:deb/debian/matomo@0?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/matomo@0%3Fdistro=trixie

url	pkg:deb/debian/matomo@5.3.1%2Bdfsg-1?distro=trixie
purl	pkg:deb/debian/matomo@5.3.1%2Bdfsg-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/matomo@5.3.1%252Bdfsg-1%3Fdistro=trixie

url	pkg:deb/debian/matomo@5.8.0-1?distro=trixie
purl	pkg:deb/debian/matomo@5.8.0-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/matomo@5.8.0-1%3Fdistro=trixie

Affected_packages

url pkg:composer/matomo/matomo@1.10

purl pkg:composer/matomo/matomo@1.10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/matomo/matomo@1.10

url pkg:composer/matomo/matomo@1.10.1

purl pkg:composer/matomo/matomo@1.10.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/matomo/matomo@1.10.1

url pkg:composer/matomo/matomo@1.11-b1

purl pkg:composer/matomo/matomo@1.11-b1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/matomo/matomo@1.11-b1

url pkg:composer/matomo/matomo@1.11-b2

purl pkg:composer/matomo/matomo@1.11-b2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/matomo/matomo@1.11-b2

url pkg:composer/matomo/matomo@1.11-b3

purl pkg:composer/matomo/matomo@1.11-b3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/matomo/matomo@1.11-b3

url pkg:composer/matomo/matomo@1.11-b4

purl pkg:composer/matomo/matomo@1.11-b4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/matomo/matomo@1.11-b4

url pkg:composer/matomo/matomo@1.11-b5

purl pkg:composer/matomo/matomo@1.11-b5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/matomo/matomo@1.11-b5

url pkg:composer/matomo/matomo@1.11-b6

purl pkg:composer/matomo/matomo@1.11-b6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/matomo/matomo@1.11-b6

url pkg:composer/matomo/matomo@1.8.3

purl pkg:composer/matomo/matomo@1.8.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/matomo/matomo@1.8.3

url pkg:composer/matomo/matomo@1.8.4

purl pkg:composer/matomo/matomo@1.8.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/matomo/matomo@1.8.4

url pkg:composer/matomo/matomo@1.9.1

purl pkg:composer/matomo/matomo@1.9.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/matomo/matomo@1.9.1

url pkg:composer/matomo/matomo@1.9.2

purl pkg:composer/matomo/matomo@1.9.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/matomo/matomo@1.9.2

url pkg:composer/piwik/piwik@1.8.3

purl pkg:composer/piwik/piwik@1.8.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4y2q-2re4-v3hx

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/piwik/piwik@1.8.3

url pkg:composer/piwik/piwik@1.8.4

purl pkg:composer/piwik/piwik@1.8.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4y2q-2re4-v3hx

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/piwik/piwik@1.8.4

url pkg:composer/piwik/piwik@1.9.1

purl pkg:composer/piwik/piwik@1.9.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4y2q-2re4-v3hx

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/piwik/piwik@1.9.1

url pkg:composer/piwik/piwik@1.9.2

purl pkg:composer/piwik/piwik@1.9.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4y2q-2re4-v3hx

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/piwik/piwik@1.9.2

url pkg:composer/piwik/piwik@1.10

purl pkg:composer/piwik/piwik@1.10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4y2q-2re4-v3hx

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/piwik/piwik@1.10

url pkg:composer/piwik/piwik@1.10.1

purl pkg:composer/piwik/piwik@1.10.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4y2q-2re4-v3hx

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/piwik/piwik@1.10.1

url pkg:composer/piwik/piwik@1.11-b1

purl pkg:composer/piwik/piwik@1.11-b1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4y2q-2re4-v3hx

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/piwik/piwik@1.11-b1

url pkg:composer/piwik/piwik@1.11-b2

purl pkg:composer/piwik/piwik@1.11-b2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4y2q-2re4-v3hx

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/piwik/piwik@1.11-b2

url pkg:composer/piwik/piwik@1.11-b3

purl pkg:composer/piwik/piwik@1.11-b3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4y2q-2re4-v3hx

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/piwik/piwik@1.11-b3

url pkg:composer/piwik/piwik@1.11-b4

purl pkg:composer/piwik/piwik@1.11-b4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4y2q-2re4-v3hx

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/piwik/piwik@1.11-b4

url pkg:composer/piwik/piwik@1.11-b5

purl pkg:composer/piwik/piwik@1.11-b5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4y2q-2re4-v3hx

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/piwik/piwik@1.11-b5

url pkg:composer/piwik/piwik@1.11-b6

purl pkg:composer/piwik/piwik@1.11-b6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4y2q-2re4-v3hx

vulnerability	VCID-ftxv-cf66-fqby

vulnerability	VCID-zvwh-8431-f7a3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/piwik/piwik@1.11-b6

References

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2013-1844

reference_id

reference_type

scores

value	0.00225
scoring_system	epss
scoring_elements	0.45336
published_at	2026-05-30T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2013-1844

reference_url

https://github.com/matomo-org/matomo

reference_id

reference_type

scores

value	1.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U

value	LOW
scoring_system	generic_textual
scoring_elements

url

https://github.com/matomo-org/matomo

reference_url

https://web.archive.org/web/20130313093839/http://piwik.org/blog/2013/03/piwik-1-11

reference_id

reference_type

scores

value	1.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U

value	LOW
scoring_system	generic_textual
scoring_elements

url

https://web.archive.org/web/20130313093839/http://piwik.org/blog/2013/03/piwik-1-11

reference_url

http://www.openwall.com/lists/oss-security/2013/03/12/4

reference_id

reference_type

scores

value	1.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U

value	LOW
scoring_system	generic_textual
scoring_elements

url

http://www.openwall.com/lists/oss-security/2013/03/12/4

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2013-1844

reference_id

CVE-2013-1844

reference_type

scores

value	1.3
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U

value	LOW
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2013-1844

reference_url

https://github.com/advisories/GHSA-5fpj-6vq6-fmwh

reference_id

GHSA-5fpj-6vq6-fmwh

reference_type

scores

value	LOW
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-5fpj-6vq6-fmwh

Weaknesses

cwe_id	79
name	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

Exploits

Severity_range_score 0.1 - 3

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zvwh-8431-f7a3

Vulnerability Instance