CVE-2026-71285 - Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pages
CVE ID :CVE-2026-71285 Published : Aug. 5, 2026, 1:24 p.m. | 1 hour, 58 minutes ago Description :Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo `siteId` value as a bare, unquoted JavaScript expression inside a
Published : Aug. 5, 2026, 1:24 p.m. | 1 hour, 58 minutes ago
Description :Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo `siteId` value as a bare, unquoted JavaScript expression inside a

