Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-11184

Cross-Site Scripting Vulnerability in QWC2 Registration GUI

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC.ch

Description

Cross-site scripting vulnerability in QGIS QWC2 Registration GUI <=v2025.03.31 allows an authorized attacker to plant arbitrary JavaScript code in the page

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

qwc-services qwc-registration-gui

Default version status: unaffected

  • 0 to ≤ v2025.03.31affected
  • 2025.09.30unaffected

References