PRODUCT PROFILE

mf_gig_calendar

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2021-245102021/09/14

WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting

WordPress MF Gig Calendar plugin 1.1 and prior contains a reflected cross-site scripting vulnerability. It does not sanitize or escape the id GET parameter before outputting back in the admin dashboard when editing an event.

mf_gig_calendarPoC 已收录

CVSS6.1EPSS 19.9%

中危CVE-2012-42422012/10/01

WordPress Plugin MF Gig Calendar 0.9.2 - Cross-Site Scripting

A cross-site scripting vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the query string to the calendar page.

mf_gig_calendarPoC 已收录

CVSS4.3EPSS 5.5%