VULNERABILITY INTELLIGENCE

CVE-2025-25191

CVSS score5.4 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2025-03-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

Group-Office is an enterprise CRM and groupware tool. This Stored XSS vulnerability exists where user input in the Name field is not properly sanitized before being stored. This vulnerability is fixed in 6.8.100.

Weakness classification

  • security-advisories@github.com: CWE-79

Primary references