CVE-2026-71285:详情

CVE-2026-71285

8.1
/
高危
2026-08-05
13h24 +00:00
Cross-site Scripting
A03-Injection
Network
2026-10-23
21h10 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo value as a bare, unquoted JavaScript expression inside a