Medium severity5.4NVD Advisory· Published Aug 21, 2025· Updated Jun 17, 2026

CVE-2025-53504

Description

Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Intermesh/Group Office
cpe:2.3:a:group-office:group_office:*:*:*:*:*:*:*:*
Range: <6.8.119
Intermesh/Group Office CRMllm-fuzzy
Range: <6.8.119, <25.0.20
Intermesh/Groupofficev5
Range: prior to 25.0.20

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN72111431/nvdThird Party Advisory
www.group-office.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000