blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2021-24510

MEDIUM 6.1 CVSS 3.1
Published
September 13, 2021
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the id GET parameter before outputting back in the admin dashboard when editing an Event, leading to a reflected Cross-Site Scripting issue

Affected products and versions

  • Unknown MF Gig Calendar — Before 1.2

References

  • wpscan.com https://wpscan.com/vulnerability/715721b0-13a1-413a-864d-2380f38ecd39 Third Party Advisory
  • nvd.nist.gov Official NVD record