Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2021-32539

Hundred Plus 101EIP - Stored XSS-1

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows remote authenticated users to inject JavaScript and perform a stored XSS attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hundred Plus 101EIP

  • RELEASE_200925affected

References