Lucene search
+L

47 matches found

cvelist
cvelist
added 2025/12/12 5:1 a.m.33 views

CVE-2025-57883

Reflected cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If a user accesses a crafted page or URL, an arbitrary script may be executed on the web browser of the user...

6.1CVSS0.0016EPSS
Exploits0References2
cve
cve
added 2025/12/12 5:1 a.m.10 views

CVE-2025-57883

CVE-2025-57883 is a reflected cross-site scripting vulnerability affecting Japan Total System GroupSession components: Free edition prior to ver5.3.0, byCloud prior to ver5.3.3, and ZION prior to ver5.3.2. The issue allows an arbitrary script to run in the user’s browser when a crafted page or UR...

6.1CVSS5.7AI score0.0016EPSS
Exploits0References2Affected Software1
cvelist
cvelist
added 2025/12/12 5:1 a.m.35 views

CVE-2025-66284

Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION prior to ver5.7.1. A logged-in user can prepare a malicious page or URL, and an arbitrary script may be executed on the web browser when...

5.4CVSS0.00147EPSS
Exploits0References2
cve
cve
added 2025/12/12 5:1 a.m.11 views

CVE-2025-66284

Summary of CVE-2025-66284 : The vulnerability is a stored cross-site scripting (XSS) flaw affecting GroupSession Free edition prior to 5.7.1, GroupSession byCloud prior to 5.7.1, and GroupSession ZION prior to 5.7.1. The description indicates that a logged-in attacker can craft a page or URL, whi...

5.4CVSS5.6AI score0.00147EPSS
Exploits0References2Affected Software1
cvelist
cvelist
added 2025/12/12 5:1 a.m.30 views

CVE-2025-53523

Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. A logged-in user can prepare a malicious page or URL, and an arbitrary script may be executed on the web browser when...

5.4CVSS0.00147EPSS
Exploits0References2
vulnrichment
vulnrichment
added 2025/12/12 5:1 a.m.3 views

CVE-2025-54407

Stored cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If a user accesses a crafted page or URL, an arbitrary script may be executed on the web browser of the user...

6.1CVSS5.5AI score0.0016EPSS
Exploits0References2
euvd
euvd
added 2025/12/12 5:1 a.m.4 views

EUVD-2025-203027

Stored cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If a user accesses a crafted page or URL, an arbitrary script may be executed on the web browser of the user...

6.1CVSS5.4AI score0.0016EPSS
Exploits0References3
cvelist
cvelist
added 2025/12/12 5:1 a.m.31 views

CVE-2025-54407

Stored cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If a user accesses a crafted page or URL, an arbitrary script may be executed on the web browser of the user...

6.1CVSS0.0016EPSS
Exploits0References2
cve
cve
added 2025/12/12 5:1 a.m.14 views

CVE-2025-54407

CVE-2025-54407 is a stored cross-site scripting vulnerability affecting GroupSession Free edition prior to 5.3.0, GroupSession byCloud prior to 5.3.3, and GroupSession ZION prior to 5.3.2. The published descriptions state that if a user accesses a crafted page or URL, an arbitrary script may be e...

6.1CVSS5.5AI score0.0016EPSS
Exploits0References2Affected Software1
cnnvd
cnnvd
added 2025/12/12 12:0 a.m.5 views

Japan Total System多款产品 跨站脚本漏洞

Japan Total System GroupSession Free edition and others are an enterprise collaboration software from Japan Total System, Inc. A cross-site scripting vulnerability exists in various Japan Total System products, which stems from a stored cross-site scripting issue that could lead to arbitrary scri...

6.1CVSS6AI score0.0016EPSS
Exploits0References2
cnnvd
cnnvd
added 2025/12/12 12:0 a.m.5 views

Japan Total System多款产品 安全漏洞

Japan Total System GroupSession Free edition, among others, is an enterprise collaboration software from Japan Total System. A security vulnerability exists in various Japan Total System products, which stems from an improper authorization check that could result in modification of memo fields. T...

5.3CVSS4.9AI score0.00165EPSS
Exploits0References2
cnnvd
cnnvd
added 2025/12/12 12:0 a.m.6 views

Japan Total System多款产品 跨站脚本漏洞

Japan Total System GroupSession Free edition and others are an enterprise collaboration software from Japan Total System, Inc. A cross-site scripting vulnerability exists in various Japan Total System products, which stems from a stored cross-site scripting vulnerability that could result in...

5.4CVSS5.3AI score0.00147EPSS
Exploits0References2
cnnvd
cnnvd
added 2025/12/12 12:0 a.m.5 views

Japan Total System多款产品 跨站请求伪造漏洞

Japan Total System GroupSession Free edition and others are an enterprise collaboration software from Japan Total System, Inc. A cross-site request forgery vulnerability exists in various Japan Total System products, which stems from a cross-site request forgery issue that could lead to the...

5.1CVSS4.9AI score0.00109EPSS
Exploits0References2
cnnvd
cnnvd
added 2025/12/12 12:0 a.m.4 views

Japan Total System GroupSession Free edition和Japan Total System GroupSession byCloud 跨站脚本漏洞

Japan Total System GroupSession Free edition and Japan Total System GroupSession byCloud are enterprise collaboration software from Japan Total System. A cross-site scripting vulnerability exists in Japan Total System GroupSession Free edition prior to 5.3.0, Japan Total System GroupSession byClo...

5.4CVSS5.3AI score0.00147EPSS
Exploits0References2
ptsecurity
ptsecurity
added 2025/12/12 12:0 a.m.10 views

PT-2025-50873

Reflected cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If a user accesses a crafted page or URL, an arbitrary script may be executed on the web browser of the user...

6.1CVSS6.1AI score0.0016EPSS
Exploits0References3
ptsecurity
ptsecurity
added 2025/12/12 12:0 a.m.7 views

PT-2025-50880

Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION prior to ver5.7.1. A logged-in user can prepare a malicious page or URL, and an arbitrary script may be executed on the web browser when...

5.4CVSS6AI score0.00147EPSS
Exploits0References3
ptsecurity
ptsecurity
added 2025/12/12 12:0 a.m.6 views

PT-2025-50872

Stored cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If a user accesses a crafted page or URL, an arbitrary script may be executed on the web browser of the user...

6.1CVSS5.9AI score0.0016EPSS
Exploits0References3
cnnvd
cnnvd
added 2025/12/12 12:0 a.m.6 views

Japan Total System GroupSession Free edition和Japan Total System GroupSession byCloud 跨站脚本漏洞

Japan Total System GroupSession Free edition and Japan Total System GroupSession byCloud are enterprise collaboration software from Japan Total System. A cross-site scripting vulnerability exists in Japan Total System GroupSession Free edition prior to 5.3.0, Japan Total System GroupSession byClo...

6.1CVSS6AI score0.0016EPSS
Exploits0References2
ptsecurity
ptsecurity
added 2025/12/12 12:0 a.m.11 views

PT-2025-50871

Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. A logged-in user can prepare a malicious page or URL, and an arbitrary script may be executed on the web browser when...

5.4CVSS6AI score0.00147EPSS
Exploits0References3
ptsecurity
ptsecurity
added 2025/12/12 12:0 a.m.8 views

PT-2025-50879

Reflected cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION prior to ver5.7.1. If a user accesses a crafted page or URL, an arbitrary script may be executed on the web browser of the user...

6.1CVSS6.1AI score0.0016EPSS
Exploits0References3
Rows per page
Query Builder