CVE-2025-11189

CVE-2025-11189 PUBLISHED

Description (CNA)

The Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability within the login-url parameter, allowing for Javascript execution.

Affected (CNA)

Vendor / product	Versions
Synchroweb / Kiwire	affected 3.6

CWE

No CWE identifiers supplied.

References

https://www.synchroweb.com/release-notes/kiwire/security

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://www.kb.cert.org/vuls/id/887923