GZ
Product
GroupSession ZION
10
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 10Low 0
Watch
Add GroupSession ZION to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-65120 | 6.1 | Dec 12 | Reflected cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION prior to ver5.7.1 Affected: prior to ver5.7.1 |
| CVE-2025-57883 | 6.1 | Dec 12 | Reflected cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2 Affected: prior to ver5.3.2 |
| CVE-2025-54407 | 6.1 | Dec 12 | Stored cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2 Affected: prior to ver5.3.2 |
| CVE-2025-62192 | 5.4 | Dec 12 | SQL Injection vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2 Affected: prior to ver5.3.2 |
| CVE-2025-66284 | 5.4 | Dec 12 | Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION prior to ver5.7.1 Affected: prior to ver5.7.1 |
| CVE-2025-53523 | 5.4 | Dec 12 | Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2 Affected: prior to ver5.3.2 |
| CVE-2025-61987 | 5.3 | Dec 12 | GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2 Affected: prior to ver5.3.2 |
| CVE-2025-64781 | 4.7 | Dec 12 | In GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION prior to ver5.7.1, "External page display restriction" is set to "Do… Affected: prior to ver5.7.1 |
| CVE-2025-58576 | 4.3 | Dec 12 | Cross-site request forgery vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2 Affected: prior to ver5.3.2 |
| CVE-2025-61950 | 4.3 | Dec 12 | In GroupSession, a Circular notice can be created with its memo field non-editable, but the authorization check is improperly implemented Affected: prior to ver5.3.2 |
Showing 10