CVE-2021-32539: Improper Neutralization of Input During Web Page Generation

Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows remote authenticated users to inject JavaScript and perform a stored XSS attack...

PT-2021-19764

Name of the Vulnerable Software and Affected Versions: 101EIP system affected versions not specified Description: The issue concerns the 'Add event in calendar' function, which fails to filter special characters in specific fields. This allows remote authenticated users to inject JavaScript,...