Cross-site Scripting (XSS) - Stored in GitHub repository craigk5n/webcalendar prior to master.
CWE-79