PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability

["OS2A BTO" <os2a.bto () gmail com>]

Multiple Cross Site Scripting Vulnerabilities were identified in
SoftComplex Inc. 's PHP Event Calendar, a reusable PHP script that
extends a web site's functionality with an event scheduler or news
archive.
http://www.softcomplex.com/products/php_event_calendar/

Attached is the advisory which details the vulnerability.

Thanks,
OS2A

Attachment: os2a_1007.txt
Description: