Kiwire Captive Portal vulnerabilities

3 known CVE vulnerabilities in Kiwire Captive Portal, translated and rated.

CVE-2025-11190Medium
The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redirect users to an attacker controlled website.
CVE-2025-11189High
Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability in the login-url parameter, allowing JavaScript execution.
CVE-2025-11188High
Kiwire Captive Portal contains a blind SQL injection vulnerability in the nas-id parameter, allowing SQL commands to be issued and compromising the corresponding database.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS