CVE-2021-25989

Name of the Vulnerable Software and Affected Versions ifme versions 1.0.0 through 7.31.4

Description The issue is related to a stored XSS vulnerability in the markdown editor. It can be exploited by making a victim a Leader of a group, which triggers the payload for them.

Recommendations For versions 1.0.0 through 7.31.4, consider disabling the markdown editor until a patch is available to prevent exploitation of the stored XSS vulnerability. Restrict access to the group leadership feature to minimize the risk of triggering the payload.