Research ·
Stored XSS Admin Takeover in Matomo
A stored cross-site scripting bug in Matomo that allowed taking over an administrator account.
- Affected
- Matomo
Reported to Matomo through their HackerOne program. The report is private, so there is no write-up here.