216.73.216.86

CVE-2025-11189

· Published 10/10/2025 11:15 · Modified 10/10/2025 11:15

Labels: CVE-2025-11189 2025-10-10CVE-2025-11189[email protected]

Essential information

Published
10/10/2025 11:15
Modified
10/10/2025 11:15
Author
Creator
CISA KEV
No
CWE

Description

The Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability within the login-url parameter, allowing for Javascript execution.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
kiwire / captive portal cpe:2.3:a:kiwire:captive_portal:*:*:*:*:*:*:*:*

References