CVE-2010-1453

Published: May 7, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Login form in Piwik 0.1.6 through 0.5.5 allows remote attackers to inject arbitrary web script or HTML via the form_url parameter.

Affected (51)

Products: Matomo: Matomo · Piwik: Piwik

1 product

1 product

Configuration A

51 vulnerable

Vulnerable Software	Affected Versions
Matomo Matomo	Version 0.1.10
Matomo Matomo	Version 0.1.6
Matomo Matomo	Version 0.1.7
Matomo Matomo	Version 0.1.8
Matomo Matomo	Version 0.1.9
Matomo Matomo	Version 0.2.10
Matomo Matomo	Version 0.2.11
Matomo Matomo	Version 0.2.12
Matomo Matomo	Version 0.2.13
Matomo Matomo	Version 0.2.14
Matomo Matomo	Version 0.2.16
Matomo Matomo	Version 0.2.17
Matomo Matomo	Version 0.2.18
Matomo Matomo	Version 0.2.19
Matomo Matomo	Version 0.2.1
Matomo Matomo	Version 0.2.20
Matomo Matomo	Version 0.2.22
Matomo Matomo	Version 0.2.23
Matomo Matomo	Version 0.2.24
Matomo Matomo	Version 0.2.25
Matomo Matomo	Version 0.2.26
Matomo Matomo	Version 0.2.27
Matomo Matomo	Version 0.2.28
Matomo Matomo	Version 0.2.29
Matomo Matomo	Version 0.2.2
Matomo Matomo	Version 0.2.30
Matomo Matomo	Version 0.2.31
Matomo Matomo	Version 0.2.32
Matomo Matomo	Version 0.2.33
Matomo Matomo	Version 0.2.34
Matomo Matomo	Version 0.2.3
Matomo Matomo	Version 0.2.4
Matomo Matomo	Version 0.2.5
Matomo Matomo	Version 0.2.6
Matomo Matomo	Version 0.2.7
Matomo Matomo	Version 0.2.8
Matomo Matomo	Version 0.2.9
Matomo Matomo	Version 0.4.1 rc1
Matomo Matomo	Version 0.4.4
Matomo Matomo	Version 0.4.5
Matomo Matomo	Version 0.4 rc1
Matomo Matomo	Version 0.4 rc2
Matomo Matomo	Version 0.4 rc3
Matomo Matomo	Version 0.5.1
Matomo Matomo	Version 0.5.2
Matomo Matomo	Version 0.5.3
Matomo Matomo	Version 0.5.4
Matomo Matomo	Version 0.5.5
Matomo Matomo	Version 0.5
Piwik Piwik	Version 0.5.5 rc1
Piwik Piwik	Version 0.5.5 rc2