CVE-2025-11184: Cross-Site Scripting Vulnerability in QWC2 Registration GUI
Published Oct 13, 2025
·Updated
Cross-site scripting vulnerability in QGIS QWC2 Registration GUI <=v2025.03.31 allows an authorized attacker to plant arbitrary JavaScript code in the page
Affected Software
1 affected component
QGIS QWC2 Registration GUI<=2025.03.31
Event History
Oct 13, 2025
CVE Published
via MITRE·09:20 AM
Data Sourced
via MITRE·09:20 AM
DescriptionWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-11184?
CVE-2025-11184 has been rated as a moderate severity cross-site scripting vulnerability.
2
How do I fix CVE-2025-11184?
To fix CVE-2025-11184, upgrade the QGIS QWC2 Registration GUI to a version later than 2025.03.31.
3
Who is affected by CVE-2025-11184?
CVE-2025-11184 affects users of QGIS QWC2 Registration GUI versions up to and including 2025.03.31.
4
What type of vulnerability is CVE-2025-11184?
CVE-2025-11184 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2025-11184 be exploited by unauthenticated users?
No, CVE-2025-11184 requires an authorized user to exploit the vulnerability.