I released version 2.3.10 of My Calendar today, which fixes a major XSS security issue. Please upgrade – regardless of your current version – as soon as possible! This issue goes back quite a long ways and applies to many versions of My Calendar.

And if you’re on a version of My Calendar that it doesn’t impact, you should update anyway. Seriously.

Thanks to Tim Hurley for responsibly reporting this issue!