CVE-2026-63010

The Group-Office enterprise customer relationship management and groupware tool is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 6.8.172 , 25.0.108 , and 26.0.33 . A low-privileged user can create manual reminders containing arbitrary HTML/JavaScript and assign them to othe...

CVE-2026-63010 Group-Office: Stored XSS via Manual Reminders

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.172, 25.0.108, and 26.0.33, a low-privileged user can create manual reminders containing arbitrary HTML/JavaScript and assign them to any other user including administrators. When the victim's...

CVE-2026-63010: Intermesh groupoffice: Group-Office is an enterprise customer relationship management and groupware tool

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.172, 25.0.108, and 26.0.33, a low-privileged user can create manual reminders containing arbitrary HTML/JavaScript and assign them to any other user including administrators. When the victim's...