CVE-2025-66284
Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION prior to ver5.7.1. A logged-in user can prepare a malicious page or URL, and an arbitrary script may be executed on the web browser when another user accesses it.
Vendor
Product
CWE
Yayın Tarihi
2025-12-12 05:16:12
Güncelleme
2026-02-17 15:07:21
Source Identifier
vultures@jpcert.or.jp
KEV Date Added
-