CVE-2025-11183

Cross-Site Scripting Vulnerability in QWC2 PUBLISHED

Description (CNA)

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 <2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page

Affected (CNA)

Vendor / product	Versions
QGIS / QWC2	affected 0 before 2025.08.14; unaffected 2025.08.14

CWE

CWE-79

References

https://hub.ntc.swiss/ntcf-2025-4286

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.