CVE-2025-11183CWE-79cross-site-scripting

CVE-2025-11183

published October 13, 2025

CVSS

6.9

EPSS

Percentile

35.2

In the wild

Unconfirmed

What it is

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 <2025.08.14

allows an authorized attacker to plant arbitrary JavaScript code in the page

The record

Technical detail

CVSS: 6.9 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00420 · 35.2th percentile
Weakness: CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2025-10-13T14:15Z

References (1)

EPSS history

Timeline