[MEDIUM] Piwik (now Matomo) Vulnerable to Arbitrary Code Execution

PKSA-jt68-m267-xdnv CVE-2011-4941 GHSA-2qr8-h6pq-m27v

Affected version: >=1.2,<1.5

Reported by:
GitHub

[LOW] Piwik (now Matomo) Vulnerable to Cross-Site Scripting (XSS)

PKSA-bmzb-yhjj-ts7c CVE-2013-1844 GHSA-5fpj-6vq6-fmwh

Affected version: <1.11

Reported by:
GitHub

[MEDIUM] Piwik (now Matomo) Reveals Sensitive Information by Accepting Input from `POST` Requests

PKSA-cw8m-h7bb-58g4 CVE-2013-2633 GHSA-v8h8-93mx-82h5

Affected version: <1.11

Reported by:
GitHub