VYPR
← All advisories
Medium severity5.4NVD Advisory· Published May 28, 2021· Updated Jun 17, 2026

CVE-2021-32539

CVE-2021-32539

Description

Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows remote authenticated users to inject JavaScript and perform a stored XSS attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Hundredplus/101eip
    cpe:2.3:a:hundredplus:101eip:200925:*:*:*:*:*:*:*
  • Hundred Plus/101EIPv5
    Range: RELEASE_200925

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.