GCVE - cpe:2.3:a:matomo:matomo:1.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:matomo:matomo:1.4:*:*:*:*:*:*:*

part: a version: 1.4 update: *

Vendor	Matomo (`21a512e7-6247-5f2d-9ce2-74205c18c8ba`)
Product	Matomo (`0baf95f5-d38a-51b6-b353-58f62e1ceb8b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/matomo-org/matomo`	purl2cpe	2026-06-01 10:15:16.497812
`pkg:rpm/opensuse/matomo`	purl2cpe	2026-06-01 10:15:16.497813

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-2633`	vulnerable	2026-06-08 05:04:27.141324	Details available Piwik before 1.11 accepts input from a POST request instead of a GET request in unspecified circumstances, which might allow attackers to obtain sensitive information by leveraging the logging of parameters. Published: 2013-03-21T21:00:00.000Z Updated: 2024-09-16T17:53:59.529Z Open on db.gcve.eu Reference links http://piwik.org/blog/2013/03/piwik-1-11/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1844`	vulnerable	2026-06-08 05:03:56.758150	Details available Cross-site scripting (XSS) vulnerability in Piwik before 1.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2013-03-21T21:00:00.000Z Updated: 2024-09-17T01:51:34.424Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/03/12/4 http://piwik.org/blog/2013/03/piwik-1-11/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4541`	vulnerable	2026-06-08 05:02:51.341974	Details available Cross-site scripting (XSS) vulnerability in Piwik before 1.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2012-11-19T11:00:00.000Z Updated: 2024-09-17T00:36:04.315Z Open on db.gcve.eu Reference links http://piwik.org/blog/2012/10/piwik-1-9/ http://www.openwall.com/lists/oss-security/2012/10/22/1 http://www.openwall.com/lists/oss-security/2012/10/23/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4941`	vulnerable	2026-06-08 04:59:33.961277	Details available Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors. Published: 2012-09-18T18:00:00.000Z Updated: 2024-09-16T19:15:49.328Z Open on db.gcve.eu Reference links http://piwik.org/blog/2011/06/piwik-1-5-security-advisory/ http://www.openwall.com/lists/oss-security/2012/03/19/8 http://www.openwall.com/lists/oss-security/2012/03/18/1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.