Medium severity6.1NVD Advisory· Published Dec 12, 2025· Updated Jun 17, 2026
CVE-2025-54407
CVE-2025-54407
Description
Stored cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If a user accesses a crafted page or URL, an arbitrary script may be executed on the web browser of the user.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:groupsession:groupsession:*:*:*:*:free:*:*:*+ 4 more
- cpe:2.3:a:groupsession:groupsession:*:*:*:*:free:*:*:*range: <5.3.0
- cpe:2.3:a:groupsession:groupsession:*:*:*:*:zion:*:*:*range: <5.3.2
- cpe:2.3:a:groupsession:groupsession:*:*:*:*:bycloud:*:*:*range: <5.3.3
- (no CPE)range: prior to ver5.3.3
- (no CPE)range: prior to ver5.3.2
prior to ver5.3.0+ 1 more
- (no CPE)range: prior to ver5.3.0
- (no CPE)range: <5.3.0
- Range: <5.3.3
- Range: <5.3.2
Patches
Vulnerability mechanics
References
2- groupsession.jp/info/info-news/security20251208nvdVendor Advisory
- jvn.jp/en/jp/JVN19940619/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.