LPS-41387 Various XSS bugs in Calendar plugin

@eduardolundgren