CVE-2025-48993 – Group-Office Reflected Cross-Site Scripting Vulnerability

June 16, 2025

CVE ID : CVE-2025-48993

Published : June 17, 2025, 1:15 a.m. | 25 minutes ago

Description : Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.123 and 25.0.27, a malicious JavaScript payload can be executed via the Look and Feel formatting fields. Any user can update their Look and Feel Formatting input fields, but the web application does not sanitize their input. This could result in a reflected cross-site scripting (XSS) attack. This issue has been patched in versions 6.8.123 and 25.0.27.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-6147 – TOTOLINK A702R HTTP POST Request Handler Buffer Overflow Vulnerability

Next Article CVE-2025-49596: Critical RCE Vulnerability in MCP Inspector Exposes AI Developer Environments

Newest LF Decentralized Trust Lab HOPrS identifies if photos have been altered

Coder reimagines development environments to make them more ideal for AI agents

Report: AI coding productivity gains cancelled out by other friction points that slow developers down

15 Proven Benefits of Outsourcing Node.js Development for Large Organizations

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Owlcat Games talks to us about about WH40K: Rogue Trader, the next game ‘Dark Heresy’ — and how the studio feels about working with Xbox Game Pass

Microsoft says ‘we have threads at home’ — rolls out feature Slack has had for years

Subnautica 2 publisher Krafton reportedly delayed it to 2026 — did it just kill a $250 million bonus for devs in the crib?

Cally – Small, feature-rich calendar components

Cally – Small, feature-rich calendar components

Working with the Command Line and WP-CLI

Access to Care Is Evolving: What Consumer Insights and Behavior Models Reveal

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Owlcat Games talks to us about about WH40K: Rogue Trader, the next game ‘Dark Heresy’ — and how the studio feels about working with Xbox Game Pass

Microsoft says ‘we have threads at home’ — rolls out feature Slack has had for years

CVE-2025-48993 – Group-Office Reflected Cross-Site Scripting Vulnerability

Over 1,000 SOHO Devices Hacked in China-linked LapDogs Cyber Espionage Campaign

Blind Eagle Uses Proton66 Hosting for Phishing, RAT Deployment on Colombian Banks

Framework laptops are the latest tech hit by Trump’s tariffs — restricting PC choices for US consumers

Apple now sells refurbished iPhone 15 models at discounted prices (including the Pro Max)

Content Writing Services in Chandigarh | Techwalk Solutions

Samsung’s next Galaxy S25 phone has an Ultra-level camera – and a free preorder deal

Microsoft continues Xbox layoffs, with jobs cut at King and ZeniMax Media — read Phil Spencer’s note to staff

CVE-2025-27587 – OpenSSL PowerPC Minerva Timing Attack

Digital Transformation of Medical Documentation: PDF.js, At.js, and AI Transcription in Healthcare CRM Systems and Patient Appointment Apps

AlphaQubit tackles one of quantum computing’s biggest challenges

CVE-2025-48993 – Group-Office Reflected Cross-Site Scripting Vulnerability

Related Posts