Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The package vuetify from 2.0.0-beta.4 and before 2.6.10 is vulnerable to Cross-site Scripting (XSS) due to improper input sanitization in the 'eventName' function within the VCalendar component.