Loading vulnerability details…
CVSS v3.1
N/A
CVSS v4.0
5.3
EPSS
0.18%
Published
Dec 12, 2025
Modified
Feb 17, 2026
Public PoC / Exploit
All weaponized →No public PoC or exploit code indexed for this CVE.
Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
SQL Injection vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If exploited, information stored in the database may be obtained or altered by an authenticated user.
Weaknesses (CWE)
Affected Products (3)
References (2)