First published: Mon Nov 19 2012(Updated: )
Cross-site scripting (XSS) vulnerability in Piwik before 1.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
MediaWiki Matomo | <=1.8.4 | |
MediaWiki Matomo | =1.0 | |
MediaWiki Matomo | =1.2 | |
MediaWiki Matomo | =1.2.1 | |
MediaWiki Matomo | =1.3 | |
MediaWiki Matomo | =1.4 | |
MediaWiki Matomo | =1.5 | |
MediaWiki Matomo | =1.5.1 | |
MediaWiki Matomo | =1.6 | |
MediaWiki Matomo | =1.7 | |
MediaWiki Matomo | =1.8 | |
MediaWiki Matomo | =1.8.1 | |
MediaWiki Matomo | =1.8.2 | |
MediaWiki Matomo | =1.8.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-4541 is classified as a medium severity vulnerability due to its potential impact on web security.
To mitigate CVE-2012-4541, upgrade to Piwik version 1.9 or later to eliminate the cross-site scripting vulnerability.
CVE-2012-4541 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary scripts into web pages.
CVE-2012-4541 affects all Piwik versions prior to 1.9, including versions 1.0 through 1.8.4.
CVE-2012-4541 can be exploited by remote attackers with access to inject scripts through unspecified vectors.