Input validation vulnerability in Events Planner 1.3.10

The Events Planner plugin for WordPress has a security issue that makes it vulnerable to a type of attack called Reflected Cross-Site Scripting. This means that attackers who are not logged in can insert harmful code into pages if they can get a user to click on a link. This vulnerability exists in versions 1.3.10 and below due to not properly cleaning up and filtering the information being input and output.