Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Simple Calendar Simple Calendar ?? Google Calendar Plugin allows Stored XSS.This issue affects Simple Calendar ?? Google Calendar Plugin: from n/a through 3.2.6.