Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-11183

Cross-Site Scripting Vulnerability in QWC2

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC.ch

Description

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 <2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QGIS QWC2

Default version status: unaffected

  • 0 to < 2025.08.14affected
  • 2025.08.14unaffected

References