CVE-2012-4242

NUCLEI

MF Gig Calendar - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the query string to the calendar page.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Chris Cooper · textwebappsphp
https://www.exploit-db.com/exploits/37829

Nuclei Templates (1)

WordPress Plugin MF Gig Calendar 0.9.2 - Cross-Site Scripting
MEDIUMby daffainfo

References (2)

Scores

EPSS 0.0802
EPSS Percentile 92.0%

Classification

CWE
CWE-79
Status published

Affected Products (2)

mf_gig_calendar_project/mf_gig_calendar
n/a/n/a

Timeline

Published Oct 01, 2012
Tracked Since Feb 18, 2026