CVE-2025-11184

Cross-Site Scripting Vulnerability in QWC2 Registration GUI PUBLISHED

Description (CNA)

Cross-site scripting vulnerability in QGIS QWC2 Registration GUI <=v2025.03.31 allows an authorized attacker to plant arbitrary JavaScript code in the page

Affected (CNA)

Vendor / product	Versions
qwc-services / qwc-registration-gui	affected 0 through v2025.03.31; unaffected 2025.09.30

CWE

CWE-79

References

https://hub.ntc.swiss/ntcf-2025-7724

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.