Cross-site scripting (XSS) vulnerability in Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors.
- http://ltwcalendar.sourceforge.net/changelog.php
No PoCs found on GitHub currently.