medium5.4
CVE-2021-32539
Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows remote authenticated users to inject Ja…
Impact
Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows remote authenticated users to inject JavaScript and perform a stored XSS attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hundredplus | 101eip | Version 200925 |