CVE

CVE-2021-24510

6.1

CVSS

Description

The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the id GET parameter before outputting back in the admin dashboard when editing an Event, leading to a reflected Cross-Site Scripting issue

Attack Vector

Privileges Req.

User Interaction

mf gig calendar

Updated Oct 24, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2021-24510 Scanner

CVE-2021-24510 scanner - Cross-Site Scripting (XSS) vulnerability in MF Gig Calendar plugin for WordPress

Used 3.4k times · 3.4k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: mf gig calendar

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →