MEDIUMnpmGHSA-gxp8-m5rq-3m38· CVE-2025-11183QGIS QWC2 Cross-Site Scripting vulnerabilityModified: 9/10/2026