Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in vncal.js.php in the VN-Calendar plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 fs or 2 w parameter...