Input validation vulnerability in Timely All-in-One Events Calendar 1.10

The Timely All-in-One Events Calendar plugin for WordPress is vulnerable to a type of online attack called Cross-Site Scripting. This means that malicious code can be injected into the plugin from outside sources in versions before 1.10. This malicious code can then be executed by the victim’s browser, making it possible for attackers to access private information and damage their computer or website. To protect against this, it is important to update the plugin to version 1.10 or later, which includes input sanitization and output escaping to help prevent these attacks.