CVE-2021-25990: If-Me Ifme

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

In “ifme”, versions v7.22.0 to v7.31.4 are vulnerable against self-stored XSS in the contacts field as it allows loading XSS payloads fetched via an iframe.

Affected products

• If-Me Ifme: from 7.22.0, up to and including 7.31.4

Published 2021-12-29. Last modified 2026-06-17.