Security Advisory
CVE-2025-11183
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 <2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page