medium5.4
CVE-2021-25988
In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability (notifications section) which can be directly triggered by sending an ally…
Impact
In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability (notifications section) which can be directly triggered by sending an ally request to the admin.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| If-Me | Ifme | from 1.0.0 through 7.31.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ifmeorg/ifme/commit/720a47015e46ad387b3219fed7ebfb14ec3c854c
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25988
- https://github.com/ifmeorg/ifme/commit/720a47015e46ad387b3219fed7ebfb14ec3c854c
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25988