[MEDIUM] Piwik (now Matomo) Vulnerable to Arbitrary Code Execution

PKSA-zwyj-p7ws-njbs CVE-2011-4941 GHSA-2qr8-h6pq-m27v

Affected version: >=1.2,<1.5

Reported by:
GitHub

[LOW] Piwik (now Matomo) Vulnerable to Cross-Site Scripting (XSS)

PKSA-qf6t-khng-vf6c CVE-2013-1844 GHSA-5fpj-6vq6-fmwh

Affected version: <1.11

Reported by:
GitHub

[MEDIUM] Piwik (now Matomo) Reveals Sensitive Information by Accepting Input from `POST` Requests

PKSA-2544-jrgz-z2gq CVE-2013-2633 GHSA-v8h8-93mx-82h5

Affected version: <1.11

Reported by:
GitHub