CVE-2025-53523
Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. A logged-in user can prepare a malicious page or URL, and an arbitrary script may be executed on the web browser when another user accesses it.
Vendor
Product
CWE
Yayın Tarihi
2025-12-12 05:16:05
Güncelleme
2026-02-17 15:45:09
Source Identifier
vultures@jpcert.or.jp
KEV Date Added
-