Approved changes feed: RSS · Atom

cpe:2.3:a:mf_gig_calendar_project:mf_gig_calendar:*:*:*:*:wordpress:*:*:*

part: a version: * update: *

VendorMf Gig Calendar Project (c1b8e1be-4132-53e5-99f9-3ff544c8094b)
ProductMf Gig Calendar (0c01b9e1-25fe-5dbe-9135-bd49ca5ef2ef)
Edition*
Language*
Software editionwordpress
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/mf-gig-calendar purl2cpe 2026-06-01 10:14:41.414461
pkg:github/wyllymk/mf-gig-calendar-master purl2cpe 2026-06-01 10:14:41.414463

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24510 vulnerable 2026-06-08 05:30:04.497795 MF Gig Calendar < 1.2 - Reflected Cross-Site Scripting (XSS)
The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the id GET parameter before outputting back in the admin dashboard when editing an Event, leading to a reflected Cross-Site Scripting issue
Published: 2021-09-13T17:56:22.000Z
Updated: 2024-08-03T19:35:20.087Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.