VULNERABILITY INTELLIGENCE

CVE-2025-11183

CVSS score6.9 MEDIUM

EPSS probability0.42%

CISA KEVNot currently listed

Published2025-10-13

Last modified2026-10-23

Description

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 <2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page