CVE-2025-53523

Name of the Vulnerable Software and Affected Versions GroupSession versions prior to 5.3.0 GroupSession byCloud versions prior to 5.3.3 GroupSession ZION versions prior to 5.3.2

Description A flaw exists that allows a logged-in user to create a malicious page or URL. When another user accesses this content, an arbitrary script may be executed in their web browser. This is due to stored cross-site scripting.

Recommendations Update GroupSession to version 5.3.0 or later. Update GroupSession byCloud to version 5.3.3 or later. Update GroupSession ZION to version 5.3.2 or later.