← Back

101eip

Vendor: Hundredplus • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-32540
1Hundredplus
1101eip
Jun 17, 2026
May 28, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Add announcement function in the 101EIP system does not filter special characters, which allows authenticated users to inject JavaScript and perform a stored XSS attack.
CVE-2021-32539
1Hundredplus
1101eip
Jun 17, 2026
May 28, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows remote authenticated users to inject JavaScript and perform a stored XSS attack.