CVE-2021-32539: Hundredplus 101eip

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows remote authenticated users to inject JavaScript and perform a stored XSS attack.

Affected products

• Hundredplus 101eip: version 200925 only

Published 2021-05-28. Last modified 2026-06-17.