EUVD-2021-12813

Malware in sbrugna...

CVE-2021-25988

In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability notifications section which can be directly triggered by sending an ally request to the admin...

CVE-2021-25988

In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability notifications section which can be directly triggered by sending an ally request to the admin...

PT-2021-16911

Name of the Vulnerable Software and Affected Versions ifme versions 1.0.0 through 7.31.4 Description The issue concerns a stored XSS vulnerability in the notifications section, which can be triggered by sending an ally request to the admin. Recommendations For versions 1.0.0 through 7.31.4,...

Ifme cross-site scripting vulnerabilities

Ifme is open source a mental health experience community that encourages people to share their personal stories with trusted allies. Ifme suffers from a cross-site scripting vulnerability in versions v1.0.0 through v7.31.4, which stems from a lack of checksum filtering of user-supplied and output...