Input validation vulnerability in Spiffy Calendar 4.9.5

The Spiffy Calendar plugin for WordPress has a security vulnerability that could allow attackers with contributor or higher permissions to inject malicious code into web pages. This malicious code would run when the page is accessed, potentially giving the attackers access to private information or allowing them to take control of the website. All versions up to 4.9.6 are vulnerable, so it’s important to make sure you have the latest version of the plugin installed.