Hundredplus 101eip
2 CVEs affecting Hundredplus 101eip. Latest disclosed: 2021-05-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-32540 | Medium | 5.4 | 2021-05-28 | Add announcement function in the 101EIP system does not filter special characters, which allows authenticated users to inject JavaScript and perform a stored X… |
CVE-2021-32539 | Medium | 5.4 | 2021-05-28 | Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows remote authenticated users to inject Ja… |