Vulnerability GHSA-gxp8-m5rq-3m38
Medium Risk
MEDIUM RISK
CVSS Score: 6.0
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
1 year ago
October 13, 2025 at 12:31 PM UTC
QGIS QWC2 Cross-Site Scripting vulnerability
<2025.8.14
<2025.8.14
Summary
QGIS QWC2 Cross-Site Scripting vulnerability
Details
Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 < 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page.
Impacted packages
Timeline
Published
1 year ago
October 13, 2025 at 12:31 PM UTC
Last Modified
10 hours ago
November 05, 2026 at 09:15 PM UTC