CPE
The CP Multi View Events Calendar plugin for WordPress contains a Stored Cross-Site Scripting vulnerability allowing unauthenticated attackers to inject arbitrary web scripts via the CalendarTitle parameter.