CVE-2025-11189

Publication date

2025-10-10 11:03:08

Family

certcc

State

PUBLISHED

Description

The Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability within the login-url parameter, allowing for Javascript execution.