CVE-2021-25988: If-Me Ifme

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability (notifications section) which can be directly triggered by sending an ally request to the admin.

Affected products

• If-Me Ifme: from 1.0.0, up to and including 7.31.4

Published 2021-12-29. Last modified 2026-06-17.