https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T04:26:29.980926+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2026-00810 bdu:2026-00810 2026-10-03T04:26:29.983461+00:00 bdu:2026-00810 https://vulnerability.circl.lu/vuln/fkie_cve-2025-11183 fkie_cve-2025-11183 2026-10-03T04:26:29.983516+00:00

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 <2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page

 https://vulnerability.circl.lu/vuln/ghsa-gxp8-m5rq-3m38 GHSA-gxp8-m5rq-3m38 — QGIS QWC2 Cross-Site Scripting vulnerability 2026-10-03T04:26:29.983578+00:00

Affected: npm: qwc2

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 < 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page.