medium6.9
CVE-2025-11184
Cross-site scripting vulnerability in QGIS QWC2 Registration GUI <=v2025.03.31 allows an authorized attacker to plant arbitrary JavaScript code in the page
Impact
Cross-site scripting vulnerability in QGIS QWC2 Registration GUI <=v2025.03.31 allows an authorized attacker to plant arbitrary JavaScript code in the page
Affected products
| Product | Affected versions |
|---|---|
| QGIS QWC2 Registration GUI | through 2025.03.31 |
Versions were read from the advisory text. No structured product data has been published for this record yet.