Japan Total System GroupSession
Moderate fix4 remedies
cpe:2.3:a:groupsession:groupsession:*:*:*:*:*:*:*
Moderate fix4 remedies
- < 5.3.0
- < 5.3.3
- < 5.3.2
- < 5.7.1
GroupSession Stored Cross-Site Scripting Vulnerability
Vulnerability
Patched
A stored cross-site scripting vulnerability has been identified in GroupSession Free edition prior to 5.3.0, GroupSession byCloud prior to 5.3.3, and GroupSession ZION prior to 5.3.2. This vulnerability allows an attacker to execute arbitrary scripts in the web browser of a user who accesses a crafted page or URL.
Impact
Exploitation of this vulnerability allows for stored cross-site scripting, where scripts are executed in the context of the user.
Remediation
Users are advised to update GroupSession to the latest version. The latest version of GroupSession Free edition can be downloaded from the GroupSession website. GroupSession byCloud has already addressed this vulnerability.
Added: Dec 12, 2025, 5:49 AM
Updated: Dec 12, 2025, 5:49 AM
Vulnerability Rating
Custom Algorithm
spread
0.3impact
1.3exploitability
6.0remediation
7.7relevance
1.3threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.