EIP-2026-110692

The code describes a remote file inclusion vulnerability in PHP Event Calendar due to improper input sanitization. An attacker can exploit this to execute arbitrary PHP code by manipulating the 'path_to_calendar' parameter.