Medium severity5.4NVD Advisory· Published Mar 6, 2025· Updated Jun 17, 2026

CVE-2025-25191

Description

Group-Office is an enterprise CRM and groupware tool. This Stored XSS vulnerability exists where user input in the Name field is not properly sanitized before being stored. This vulnerability is fixed in 6.8.100.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Intermesh/Group Office
cpe:2.3:a:group-office:group_office:6.8.99:*:*:*:*:*:*:*
Intermesh/Group Office CRMllm-fuzzy
Range: <6.8.100
Intermesh/Groupofficev5
Range: < 6.8.100

Patches

Vulnerability mechanics

References

github.com/Intermesh/groupoffice/commit/c5c83e19a5cdf93b0e758726c97597861f1d6edanvdPatch
github.com/Intermesh/groupoffice/security/advisories/GHSA-j7p3-v652-p3gfnvdExploitVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000