Medium severity5.4NVD Advisory· Published Dec 29, 2021· Updated Jun 17, 2026

CVE-2021-25989

Description

In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability in the markdown editor. It can be exploited by making a victim a Leader of a group which triggers the payload for them.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

If Me/Ifme
cpe:2.3:a:if-me:ifme:*:*:*:*:*:*:*:*
Range: >=1.0.0,<=7.31.4
Ifmeorg/ifmellm-create2 versions
1.0.0 - 7.31.4+ 1 more
- (no CPE)range: 1.0.0 - 7.31.4
- (no CPE)range: 1.0.0

Patches

Vulnerability mechanics

References

github.com/ifmeorg/ifme/commit/df4986f0721a72779403d21d36c025fe95edffadnvdPatchThird Party Advisory
www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25989nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000