CP Multi View Events Calendar (<= 1.4.42)

The CP Multi View Events Calendar plugin for WordPress contains a Stored Cross-Site Scripting vulnerability allowing unauthenticated attackers to inject arbitrary web scripts via the CalendarTitle parameter.