VULNERABILITY INTELLIGENCE
CVE-2025-11184
EPSS probability0.42%
CISA KEVNot currently listed
Published2025-10-13
Last modified2026-10-23
Description
Cross-site scripting vulnerability in QGIS QWC2 Registration GUI <=v2025.03.31 allows an authorized attacker to plant arbitrary JavaScript code in the page
Weakness classification
- vulnerability@ncsc.ch: CWE-79