Piwik is prone to multiple security vulnerabilities.
Credit:
The information has been provided by Stefan Esser, SektionEins, Juho Nurminen, Mateusz Goik, Emanuel Bronshtein and James Kettle.
The original article can be found at: http://www.securityfocus.com/bid/53773
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, perform unauthorized actions, crash the affected application, deny service to legitimate users, and view or execute arbitrary local files in the context of the affected application.
Vendor Status:
Vendor had issued an update for this Vulnerability
