Security issue in third party TYPO3 extension "Calendar Base" (cal)

A security vulnerabilitiy has been discovered in the third party TYPO3 extension "Calendar Base".