Intermesh Group-office vulnerabilities

• intermesh group-office Intermesh Group-Office < 3.5.5 Path Traversal via compress.php CVE-2018-25438 8.7 HighOctober 22, 2026
• intermesh group-office, groupoffice +1 more Group-Office: Authenticated Remote Code Execution via PHP Insecure Deserialization in `AbstractSettingsCollection` CVE-2026-34838 Public exploit 10.0 CriticalApril 2, 2026
• intermesh group-office, groupoffice +1 more Authenticated SQL Injection in Contact/query addressBookIds filter CVE-2026-33755 8.8 HighMarch 27, 2026
• intermesh group-office, groupoffice +1 more Group-Office: Reflected XSS in JavaScript context CVE-2026-30238 5.1 MediumMarch 6, 2026
• intermesh group-office, groupoffice +1 more Group-Office: Self XSS in GroupOffice Installer License Page (install/license.php) CVE-2026-30237 2.1 LowMarch 6, 2026
• intermesh group-office, groupoffice +1 more Group-Office Vulnerable to Remote Code Execution (RCE) CVE-2026-27947 9.4 CriticalFebruary 27, 2026
• intermesh group-office, groupoffice +1 more Group-Office Has Authenticated SQL Injection in advancedQueryData.comparator CVE-2026-27832 7.1 HighFebruary 27, 2026
• intermesh group-office, groupoffice +1 more Group-Office vulnerable to reflected XSS via Look and Feel Formatting input CVE-2025-48993 5.3 MediumJune 17, 2025
• intermesh group-office, groupoffice +1 more Group-Office vulnerable to blind XSS CVE-2025-48992 5.2 MediumJune 16, 2025
• intermesh group-office, groupoffice +1 more GroupOffice vulnerable to Stored XSS in Tasks Comment Section CVE-2025-48369 5.3 MediumMay 22, 2025
• intermesh group-office, groupoffice +1 more GroupOffice's DOM-Based XSS in all Date Input Fields Allows Arbitrary JavaScript Execution CVE-2025-48368 5.8 MediumMay 22, 2025
• intermesh group-office, groupoffice +1 more GroupOffice's Blind Stored XSS in Phone Number Field Enables Forced Redirect and Unauthorized Actions CVE-2025-48366 6.9 MediumMay 22, 2025
• intermesh group-office, groupoffice, group-office group office +2 more Server-Side Request Forgery in groupoffice CVE-2023-46730 7.4 HighNovember 7, 2023
• intermesh group-office SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows... CVE-2010-3428 Public exploit 7.5 HighSeptember 16, 2010