Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Matthew Fries MF Gig Calendar plugin <= 1.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Matthew Fries | MF Gig Calendar | ≤ 1.2 | — |
Medium · 6.5
CVE-2023-37970
EUVD-2023-41797GHSA-grc3-pxmx-gqxp
WordPress MF Gig Calendar Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)
Published Jul 27, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack