EIP-2026-113957

The provided text describes an SQL injection vulnerability in the PHP Event Calendar plugin for WordPress, where unsanitized user input in the 'cid' parameter can be exploited to manipulate SQL queries. No actual exploit code is present, only a description and example URL.