CVE-2012-4242 MF Gig Calendar <= 0.9.4.1 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 9.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the query string to the calendar page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mf gig calendar project mf gig calendar | = 0.9.2 | No fix listed |
| wordpress mf-gig-calendar(WordPress) | < 0.9.5 | 0.9.5 |
References
- www.reactionpenetrationtesting.co.uk exploit
- 55622 vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org