WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting

WordPress MF Gig Calendar plugin 1.1 and prior contains a reflected cross-site scripting vulnerability. It does not sanitize or escape the id GET parameter before outputting back in the admin dashboard when editing an event. id: CVE-2021-24510 info: name: WordPress MF Gig Calendar =1.2 which...

CVE-2021-24510

The issue affects the WordPress MF Gig Calendar plugin prior to version 1.2. The GET parameter id is not sanitized/escaped when editing an Event, causing a reflected XSS in the admin dashboard. Impact includes injection of scripts into the admin UI; remediation is to update to version 1.2 or late...

CVE-2021-24510 MF Gig Calendar < 1.2 - Reflected Cross-Site Scripting (XSS)

The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the id GET parameter before outputting back in the admin dashboard when editing an Event, leading to a reflected Cross-Site Scripting issue...