CVE-2021-25988

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p48

Published

Dec 29, 2021 (Dec 29, 2021)

Modified

Jun 17, 2026

Description

In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability (notifications section) which can be directly triggered by sending an ally request to the admin.

Vendors: if-me
Products: ifme
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.