XSS in Intermesh Groupoffice

CVE-2025-48369

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20, a persistent Cross-Site Scripting (XSS) vulnerability exists in Groupoffice's tasks comment functionality, allowing a…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.001 (33.7th percentile) — read the EPSS interpretation.