CVE-2021-25988 — ifme - Stored Cross-Site Scripting (XSS) in Notifications section

CVE-2021-25988

ifme - Stored Cross-Site Scripting (XSS) in Notifications section PUBLISHED

Description (CNA)

In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability (notifications section) which can be directly triggered by sending an ally request to the admin.

Affected (CNA)

Vendor / product	Versions
ifmeorg / ifme	affected 1.0.0 before unspecified; affected unspecified through v7.31.4

CWE

CWE-79

References

https://github.com/ifmeorg/ifme/commit/720a47015e46ad387b3219fed7ebfb14ec3c854c
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25988

ADP enrichment

CVE

No English description supplied.

https://github.com/ifmeorg/ifme/commit/720a47015e46ad387b3219fed7ebfb14ec3c854c
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25988

CISA-ADP

No English description supplied.

No references supplied.