Medium severityGHSA Advisory· Published Oct 13, 2025· Updated Apr 15, 2026
CVE-2025-11183
CVE-2025-11183
Description
Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 <2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
qwc2npm | < 2025.08.14 | 2025.08.14 |
Affected products
2Patches
Vulnerability mechanics
References
3- github.com/advisories/GHSA-gxp8-m5rq-3m38ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-11183ghsaADVISORY
- hub.ntc.swiss/ntcf-2025-4286nvdWEB
News mentions
0No linked articles in our index yet.