Cross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and prior to v6.8.31, which may allow a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.
| Software | From | Fixed in |
|---|---|---|
| group-office / group_office | 6.8.0 | 6.8.31 |
| group-office / group_office | 6.7.0 | 6.7.64 |
| group-office / group_office | - | 6.6.182 |