XSS in Intermesh Groupoffice

CVE-2025-48366

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20, a stored and blind XSS vulnerability exists in the Phone Number field of the user profile within the GroupOffice appl…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (45.7th percentile) — read the EPSS interpretation.