← Database

CVE-2025-11189

HIGH CVSS: 7.3 Published: 2025-10-10 Modified: 2026-06-17

Description

The Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability within the login-url parameter, allowing for Javascript execution.

Affected Platforms

Synchroweb Kiwire

Weakness Type

CWE-79

References