Input validation vulnerability in Dan's Embedder for Google Calendar 1.2

The Dan’s Embedder for Google Calendar plugin for WordPress has a security flaw that makes it possible for attackers with contributor-level access and above to inject malicious web scripts into pages. This could cause the malicious web script to run every time someone visits the page, allowing the attacker to access sensitive information or take control of the page. To make sure this doesn’t happen, users should update the plugin to the latest version and always be sure to give trusted users the correct access level.