GroupSession Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in GroupSession Free edition prior to 5.3.0, GroupSession byCloud prior to 5.3.3, and GroupSession ZION prior to 5.3.2. This vulnerability allows a logged-in user to create a malicious page or URL that, when accessed by another user, executes an arbitrary script in their web browser.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user accessing the compromised page or URL.

Remediation

Users are advised to update GroupSession to the latest version. The latest version of GroupSession Free edition can be downloaded from the GroupSession website. GroupSession byCloud has already been updated to address this vulnerability.