MF Gig Calendar

MF Gig Calendar has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2012 and 2024; 3 are fixed and 4 remain unpatched as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (57%). Other recurring categories include Cross-Site Request Forgery (CSRF), SQL Injection.

3 of the records (43%) have a vendor fix, while 4 remain unpatched. The oldest unresolved one dates back to 2023.

5 independent researchers contributed these findings, most of them (2) reported by Bob Matyas.

Strategic Overview

Avg CVSSMedium

5.8/ 10

Patch Coverage43%

Open

Fixed

Get automatic notifications for all MF Gig Calendar vulnerabilities before they are exploited.

Most severe open issueCVSS 8.8CVE-2023-50842

MF Gig Calendar <=1.2.1 - Authenticated(Contributor+) SQL Injection

Read the full analysis

Vulnerability Records

7 records


2024-04-25 00:00	MF Gig Calendar <= 1.2.1 - Cross-Site Request Forgery MF Gig Calendar <= 1.2.1	`CVE-2024-33651`	4.3 Medium	Khalid	No
2024-04-15 00:00	MF Gig Calendar <= 1.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting MF Gig Calendar <= 1.2.1	`CVE-2024-3755`	4.4 Medium	Bob Matyas	No
2024-04-15 00:00	MF Gig Calendar <= 1.2.1 - Cross-Site Request Forgery to Event Deletion MF Gig Calendar <= 1.2.1	`CVE-2024-3756`	4.3 Medium	Bob Matyas	No
2023-12-21 00:00	MF Gig Calendar <=1.2.1 - Authenticated(Contributor+) SQL Injection MF Gig Calendar <= 1.2.1	`CVE-2023-50842`	8.8 High	Abu Hurayra (HurayraIIT)	No
2023-07-12 00:00	MF Gig Calendar <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via event_title and event_time MF Gig Calendar <= 1.2	`CVE-2023-37970`	6.4 Medium	Abdi Pranata	Yes
2021-08-17 00:00	MF Gig Calendar <= 1.1 - Reflected Cross-Site Scripting MF Gig Calendar <= 1.1	`CVE-2021-24510`	6.1 Medium	iohex	Yes
2012-09-23 00:00	MF Gig Calendar <= 0.9.4.1 - Cross-Site Scripting MF Gig Calendar <= 0.9.4.1	`CVE-2012-4242`	6.1 Medium	Anonymous	Yes

Showing 1–7 of 7 reports