Cross-site Scripting (XSS) in Piwik before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This is a different vulnerability than CVE-2013-0193 and CVE-2013-0194.
We have discovered 6 live websites that are affected by CVE-2013-0195.
| Product | |
| Category | JavaScript Libraries |
| Vulnerable Domains | 6 live websites (1.94% of Piwik install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 1 versions ( 14% of all versions) |
| 1 websites | |
| 3 websites | |
| 1 websites | |
| 1 websites |
| .com | 2 websites |
| .de | 2 websites |
| .es | 1 websites |
| .net | 1 websites |
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *******.****.es | ***,*** | ||
| **************.com | *,***,*** | ||
| ****.********.net | **,***,*** | ||
| *********************.de | **,***,*** | ||
| ***********************.de | **,***,*** | ||
| ************.com | **,***,*** |