The MF Gig Calendar WordPress plugin was affected by an URL Cross-Site Scripting security vulnerability.
packetstormsecurity.com/files/116713/