| Package | Affected versions | Patched versions |
|---|---|---|
| 101eip | = 200925 |
Add announcement function in the 101EIP system does not filter special characters, which allows authenticated users to inject JavaScript and perform a stored XSS attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free