CVE-2021-25990

2021-12-2909:15:09

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

In “ifme”, versions v7.22.0 to v7.31.4 are vulnerable against self-stored XSS in the contacts field as it allows loading XSS payloads fetched via an iframe.

CPENameOperatorVersion
ifmeeq7.14.3
ifmeeq7.12.8
ifmeeq7.25.4
ifmeeq7.29.3
ifmeeq7.30.13
ifmeeq6.14.0
ifmeeq7.30.5
ifmeeq7.9.6
ifmeeq7.12.2
ifmeeq7.30.12