Vulnerability GHSA-gxp8-m5rq-3m38

Medium Risk
MEDIUM RISK
CVSS Score: 6.0
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
1 year ago
October 13, 2025 at 12:31 PM UTC
QGIS QWC2 Cross-Site Scripting vulnerability
<2025.8.14
<2025.8.14

Summary

QGIS QWC2 Cross-Site Scripting vulnerability

Details

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 < 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page.

Impacted packages

Timeline

Published
1 year ago
October 13, 2025 at 12:31 PM UTC
Last Modified
10 hours ago
November 05, 2026 at 09:15 PM UTC