[SA19321] ExtCalendar calendar.php Cross-Site Scripting Vulnerabilities

ExtCalendar calendar.php Cross-Site Scripting Vulnerabilities. Input passed to "month", "year", "prev", and "next" parameters in calendar.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. The vulnerabilities have been confirmed in version 1.1. Edit the source code to ensure that input is properly sanitised