Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
CVE-2025-11183
CVE-2025-11183
Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 <2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page
Published Oct 15, 2025
https://github.com/advisories/GHSA-gxp8-m5rq-3m38
CVSS Score
Medium
6.9
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
qwc2
1.1.0-beta1
npm
qwc2
1.1.0
npm
qwc2
2025.3.26
npm
qwc2
2025.3.31
npm
qwc2
2025.4.0-2.1
npm
qwc2
2025.4.10
npm
qwc2
2025.4.14
npm
qwc2
2025.4.22
npm
qwc2
2025.4.2
npm
qwc2
2025.4.30
npm
qwc2
2025.4.3
npm
qwc2
2025.4.4
npm
qwc2
2025.4.9
npm
qwc2
2025.5.0-7.1
npm
qwc2
2025.5.12
npm
qwc2
2025.5.15
npm
qwc2
2025.5.16
npm
qwc2
2025.5.21
npm
qwc2
2025.5.23
npm
qwc2
2025.5.26
npm
qwc2
2025.5.27
npm
qwc2
2025.5.7
npm
qwc2
2025.6.10
npm
qwc2
2025.6.13
npm
qwc2
2025.6.27
npm
qwc2
2025.6.3
npm
qwc2
2025.6.4
npm
qwc2
2025.7.10
npm
qwc2
2025.7.13
npm
qwc2
2025.7.1
npm
qwc2
2025.7.20
npm
qwc2
2025.7.22
npm
qwc2
2025.7.23
npm
qwc2
2025.7.29
npm
qwc2
2025.7.2
npm
qwc2
2025.7.3
npm
qwc2
2025.7.6
npm
qwc2
2025.8.6
npm
qwc2
2025.8.7
1-39 of 39
CVE-2025-11183 | Components Impacted | Sonatype Guide | Sonatype Guide
