CVE-2024-33651

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/mf-gig-calendar/wordpress-mf-gig-calendar-plugin-1-2-1-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

Lỗ hổng khác của mf gig calendar

• CVE-2024-3756CAO 7.5The MF Gig Calendar WordPress plugin through 1.2.1 does not have CSRF checks in some places, which could allow attackers to make logged in C…
• CVE-2024-3755TRUNG BÌNH 5.4The MF Gig Calendar WordPress plugin through 1.2.1 does not sanitise and escape some of its settings, which could allow high privilege users…
• CVE-2023-50842CAO 8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Matthew Fries MF Gig Calendar.This iss…
• CVE-2023-37970TRUNG BÌNH 5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Matthew Fries MF Gig Calendar plugin <= 1.2 versions.
• CVE-2021-24510TRUNG BÌNH 6.1The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the id GET parameter before outputting back in the admin dashbo…