CVE-2017-9420

Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter.

Date published : 2017-06-05

http://www.securityfocus.com/bid/98931

http://spiffycalendar.sunnythemes.com/version-3-3-0/