WordPress Plugin Vulnerabilities

MF Gig Calendar 0.9.4.1 - URL Cross-Site Scripting

Description

The MF Gig Calendar WordPress plugin was affected by an URL Cross-Site Scripting security vulnerability.

Affects Plugins

Plugin icon
mf-gig-calendar
Fixed in 0.9.5

References

CVE
CVE-2012-4242
URL
https://packetstormsecurity.com/files/#116713/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
c37497f8-770c-488c-92d3-9eb475c28335

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2026-02-09
Title
RVCFDI para Woocommerce <= 8.1.8 - Reflected Cross-Site Scripting
Published
2025-01-14
Title
Navigation Du Lapin Blanc <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2026-02-25
Title
Custom Logo <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Logo Path Setting
Published
2025-01-16
Title
Podamibe Twilio Private Call <= 1.0.1 - Reflected Cross-Site Scripting
Published
2025-04-11
Title
WP Easy Poll <= 2.2.9 - Reflected Cross-Site Scripting