← CVE Intelligence

CVE-2021-24510

MF Gig Calendar < 1.2 - Reflected Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the id GET parameter before outputting back in the admin dashboard when editing an Event, leading to a reflected Cross-Site Scripting issue

Affected (CNA)

Vendor / productVersions
Unknown / MF Gig Calendaraffected 0 before 1.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.