CVE-2025-54407 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Stored cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION p…
Medium CVSS: 5.1

CVE-2025-54407

Stored cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If a user accesses a crafted page or URL, an arbitrary script may be executed on the web browser of the user.
Vendor
Groupsession
Product
Groupsession
CWE
CWE-79
Yayın Tarihi
2025-12-12 05:16:07
Güncelleme
2026-02-17 15:44:49
Source Identifier
vultures@jpcert.or.jp
KEV Date Added
-

Kategoriler

CWE-79 Groupsession MEDIUM Groupsession 2025

Referanslar

https://groupsession.jp/info/info-news/security20251208 https://jvn.jp/en/jp/JVN19940619/