Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-25191

Group-Office has a Stored XSS Vulnerability via user's name field

Description

Group-Office is an enterprise CRM and groupware tool. This Stored XSS vulnerability exists where user input in the Name field is not properly sanitized before being stored. This vulnerability is fixed in 6.8.100.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Intermesh groupoffice

  • < 6.8.100affected

References