CVE-2021-24510

MF Gig Calendar < 1.2 - Reflected Cross-Site Scripting (XSS)

published September 13, 2021

CVSS
—
EPSS
3%
Percentile
85.9
In the wild
Unconfirmed
What it is

The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the id GET parameter before outputting back in the admin dashboard when editing an Event, leading to a reflected Cross-Site Scripting issue

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02721 · 85.9th percentile
Published
2021-09-13T17:56Z
EPSS history
Timeline
  • 13 SEP 17:56Z
    MF Gig Calendar < 1.2 - Reflected Cross-Site Scripting (XSS)
    cvelistv5