CVE-2025-11189

The Kiwire Captive Portal is susceptible to a reflected cross-site scripting (XSS) vulnerability located within the login-url parameter. This flaw occurs due to the improper neutralization of input during web page generation, which can lead to unauthorized Javascript execution . While a sighting ...

CVE-2025-11188

The Kiwire Captive Portal is vulnerable to a blind SQL injection within the nas-id parameter. This flaw allows an attacker to issue unauthorized SQL commands, potentially leading to a full compromise of the corresponding database . Technical details regarding specific affected versions or remedia...

CVE-2025-11190

The Kiwire Captive Portal is affected by an open redirection vulnerability (CWE-59) through the login-url parameter. An attacker can leverage this flaw to redirect users to an attacker-controlled website . No specific exploit details or remediation steps are provided in the documents.