WordPress Calendar plugin version 1.3.7 suffers from a cross site scripting vulnerability. Continue reading...