CVE-2025-66284

< 5.7.1

Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ve

5.4MEDIUM

CVE-2025-65120

< 5.7.1

Reflected cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to

6.1MEDIUM

CVE-2025-64781

< 5.7.1

In GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION prior to ver5.7.1, "

4.7MEDIUM

CVE-2025-62192

< 5.3.3

SQL Injection vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and Gro

5.4MEDIUM

CVE-2025-61987

< 5.3.3

GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. do n

5.3MEDIUM

CVE-2025-61950

< 5.3.3

In GroupSession, a Circular notice can be created with its memo field non-editable, but the authorization check is improperly impl

4.3MEDIUM

CVE-2025-58576

< 5.3.3

Cross-site request forgery vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5

4.3MEDIUM

CVE-2025-57883

< 5.3.3

Reflected cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to

6.1MEDIUM

CVE-2025-54407

< 5.3.3

Stored cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver

6.1MEDIUM

CVE-2025-53523

< 5.3.3

Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ve

5.4MEDIUM

CVE-2021-20876

<= 5.1.1

Path traversal vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and Gro

6.8MEDIUM

CVE-2021-20875

<= 5.1.1

Open redirect vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and Grou

6.1MEDIUM

CVE-2021-20874

<= 5.1.1

Incorrect permission assignment for critical resource vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSessio

7.5HIGH

CVE-2021-20789

>= 2.20 and < 5.1.0

Open redirect vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSessio

6.1MEDIUM

CVE-2021-20788

>= 2.20 and < 5.1.0

Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to

4.3MEDIUM

CVE-2021-20787

>= 2.20 and < 5.1.0

Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, Grou

4.8MEDIUM

CVE-2021-20786

>= 2.20 and < 5.1.0

Cross-site request forgery (CSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to v

4.3MEDIUM

CVE-2021-20785

>= 2.20 and < 5.1.0

Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, Grou

4.8MEDIUM

CVE-2017-2166

<= 4.7.0

Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites

6.1MEDIUM

CVE-2017-2165

<= 4.6.4

GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive in

6.5MEDIUM