Mf Gig Calendar Project Mf Gig Calendar
7 CVEs affecting Mf Gig Calendar Project Mf Gig Calendar. Latest disclosed: 2024-05-06. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-50842 | High | 8.5 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Matthew Fries MF Gig Calendar.This issue affects MF Gig C… |
CVE-2024-3756 | High | 7.5 | 2024-05-06 | The MF Gig Calendar WordPress plugin through 1.2.1 does not have CSRF checks in some places, which could allow attackers to make logged in Contributors and abo… |
CVE-2023-37970 | Medium | 6.5 | 2023-07-27 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Matthew Fries MF Gig Calendar plugin <= 1.2 versions. |
CVE-2021-24510 | Medium | 6.1 | 2021-09-13 | The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the id GET parameter before outputting back in the admin dashboard when editing an… |
CVE-2024-3755 | Medium | 5.4 | 2024-05-06 | The MF Gig Calendar WordPress plugin through 1.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editor to… |
CVE-2024-33651 | Medium | 5.4 | 2024-04-26 | Cross-Site Request Forgery (CSRF) vulnerability in Matthew Fries MF Gig Calendar.This issue affects MF Gig Calendar : from n/a through 1.2.1. |
CVE-2012-4242 | | 2012-10-01 | Cross-site scripting (XSS) vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via t… |