Known CVE

WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting

WordPress MF Gig Calendar plugin 1.1 and prior contains a reflected cross-site scripting vulnerability. It does not sanitize or escape the id GET parameter before outputting back in the admin dashboard when editing an event.

CVE-2021-24510

Medium2021CVSS 6.1CWE-79

cve2021 · wp-plugin · authenticated · wpscan · wordpress · mf_gig_calendar_project · vuln

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website