CVE-2023-33211

31th percentile - higher than 31% of all known CVEs

The WP-Matomo Integration (WP-Piwik) plugin versions up to 1.0.27 contain a stored Cross-Site Scripting (XSS) vulnerability with admin authorization. An attacker can exploit this flaw to inject malicious scripts that will be executed in the victim's browser context.

Exploitation of this vulnerability may lead to session data theft, administrator account takeover, or other malicious actions. Organizations should be aware of the risks associated with using vulnerable versions of the plugin.

It is recommended to update the WP-Matomo Integration plugin to the latest version to eliminate this vulnerability. Additionally, conducting a security audit of the application is advisable to identify other potential flaws.