4 matches found
CVE-2023-37970
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Matthew Fries MF Gig Calendar plugin = 1.2 versions...
6.5CVSS5.6AI score0.0037EPSS
SaveExploits0
CVE-2021-24510
The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the id GET parameter before outputting back in the admin dashboard when editing an Event, leading to a reflected Cross-Site Scripting issue...
6.1CVSS6AI score0.02721EPSS
SaveExploits1References1
20