CVE-2025-66284 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION…
Medium CVSS: 4.8

CVE-2025-66284

Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION prior to ver5.7.1. A logged-in user can prepare a malicious page or URL, and an arbitrary script may be executed on the web browser when another user accesses it.
Vendor
Groupsession
Product
Groupsession
CWE
CWE-79
Yayın Tarihi
2025-12-12 05:16:12
Güncelleme
2026-02-17 15:07:21
Source Identifier
vultures@jpcert.or.jp
KEV Date Added
-

Kategoriler

Referanslar