Cross-site scripting (XSS) vulnerability in Piwik before 1.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Referenceshttp://piwik.org/blog/2012/10/piwik-1-9/http://www.openwall.com/lists/oss-security/2012/10/22/1http://www.openwall.com/lists/oss-security/2012/10/23/2