CVE-2021-25988

creationtimestamp| type| source ---|---|--- 2021-12-29 12:25:45+00:00| seen| https://t.me/cibsecurity/34725...

CVE-2021-25988 ifme - Stored Cross-Site Scripting (XSS) in Notifications section

In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability notifications section which can be directly triggered by sending an ally request to the admin...

CVE-2021-25988

The CVE-2021-25988 issue affects the open-source project ifme, with vulnerable versions 1.0.0 through v7.31.4. Reported as a stored XSS vulnerability in the notifications section that can be triggered by sending an ally request to an administrator. The root cause is described as lack of checksum ...

CVE-2021-25988 ifme - Stored Cross-Site Scripting (XSS) in Notifications section

In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability notifications section which can be directly triggered by sending an ally request to the admin...