Bypass Cross Site Script Vulnerability on "Calendar" in TikiWiki version 21.4

[r0ck3t1973]

Hi Team,
I found stored xss in Calendar
To Reproduce

1. Login into panel
2. Go to Documents: '/tiki-21.4/tiki-index.php'
3. Click Calendar: '/tiki-21.4/tiki-calendar.php'
4. Click Add Event
5. insert payload bypass xss in Description
   <a href="javascript&colon;alert&lpar;document&period;domain&rpar;">Click Here</a>
6. Click Details Event >> ClickHere>> Boom alert message xss!

Impact
Commonly include transmitting private data, like cookies or other session information, to the attacker, redirecting the victim to web content controlled by the attacker, or performing other malicious operations on the user’s machine under the guise of the vulnerable site.
POC