Group-Office versions prior to 6.8.119 and prior to 25.0.20 provided by Intermesh BV contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.
| Software | From | Fixed in |
|---|---|---|
| group-office / group_office | - | 6.8.119 |
| group-office / group_office | 25.0.1 | 25.0.20 |