CVE-2026-125389 | Intermesh Group-Office up to 6.8.180/25.0.115/26.0.57 Email Viewer MessagePanel.js StringHelper::filterXSS cross site scripting

A vulnerability has been found in Intermesh Group-Office up to 6.8.180/25.0.115/26.0.57 and classified as problematic. This affects the function StringHelper::filterXSS of the file MessagePanel.js of the component Email Viewer. Performing a manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-125389. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More