CVE-2025-11184CWE-79cross-site-scripting

CVE-2025-11184

published October 13, 2025

CVSS
6.9
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

Cross-site scripting vulnerability in QGIS QWC2 Registration GUI <=v2025.03.31

allows an authorized attacker to plant arbitrary JavaScript code in the page

The record
Technical detail
CVSS
6.9 · NONE
CVSS v4.0
Not supplied
EPSS
0.00420 · 35.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-10-13T14:15Z
References (1)
https://hub.ntc.swiss/ntcf-2025-7724 · [email protected]
EPSS history
Timeline
  • 13 OCT 09:20Z
    Cross-Site Scripting Vulnerability in QWC2 Registration GUI
    cvelistv5