Vulnerability Description
Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. A logged-in user can prepare a malicious page or URL, and an arbitrary script may be executed on the web browser when another user accesses it.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Groupsession | Groupsession | < 5.3.0 |
Related Weaknesses (CWE)
References
- https://groupsession.jp/info/info-news/security20251208Vendor Advisory
- https://jvn.jp/en/jp/JVN19940619/Third Party Advisory
FAQ
What is CVE-2025-53523?
CVE-2025-53523 is a vulnerability with a CVSS score of 5.4 (MEDIUM). Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. A logged-in user can ...
How severe is CVE-2025-53523?
CVE-2025-53523 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-53523?
Check the references section above for vendor advisories and patch information. Affected products include: Groupsession Groupsession.