VULNERABILITY INTELLIGENCE

CVE-2021-24510

CVSS score6.1 MEDIUM
EPSS probability2.82%
CISA KEVNot currently listed
Published2021-09-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the id GET parameter before outputting back in the admin dashboard when editing an Event, leading to a reflected Cross-Site Scripting issue

Primary references