Version 5.0.0 beta 4

applications/calendar/modules/front/calendar/view.php

@@ -143,6 +143,15 @@ class view extends Controller
             Output::i()->jsFiles = array_merge( Output::i()->jsFiles, Output::i()->js( 'front_browse.js', 'calendar', 'front' ) );
         }
 
+		/* Sanitize the parameters */
+		foreach( [ 'y', 'm', 'd' ] as $param )
+		{
+			if( isset( Request::i()->$param ) and !is_numeric( Request::i()->$param ) )
+			{
+				unset( Request::i()->$param );
+			}
+		}
+
 		/* If there is a view requested in the URL, use it */
 		if( isset( Request::i()->view ) )
 		{