← Database

CVE-2026-71285

HIGH CVSS: 8.1 Published: 2026-08-05 Modified: 2026-08-10

Description

Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo value as a bare, unquoted JavaScript expression inside a