Japan Total System GroupSession
cpe:2.3:a:groupsession:groupsession:*:*:*:*:*:*:*
- < 5.7.1
A reflected cross-site scripting vulnerability has been identified in GroupSession Free edition, GroupSession byCloud, and GroupSession ZION, all prior to version 5.7.1. This vulnerability allows an attacker to execute arbitrary scripts in the web browser of a user who accesses a crafted page or URL.
Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute scripts in the context of the user's browser.
Users are advised to update GroupSession to the latest version. Instructions for downloading the latest version of the free edition are available on the GroupSession website. GroupSession byCloud has already been updated.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.