medium5.4
CVE-2021-25989
In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability in the markdown editor.
Impact
In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability in the markdown editor. It can be exploited by making a victim a Leader of a group which triggers the payload for them.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| If-Me | Ifme | from 1.0.0 through 7.31.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ifmeorg/ifme/commit/df4986f0721a72779403d21d36c025fe95edffad
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25989
- https://github.com/ifmeorg/ifme/commit/df4986f0721a72779403d21d36c025fe95edffad
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25989