Skip to content
OpenAdvisories

Vendor

Cal.com

3 known vulnerabilities.

Products

Cal.diy 1 Cal.com 1 Cal.com Self-Hosted (Cal.diy) 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.9
    CVE-2026-57858 Public exploit

    Cal.com Cal.diy 6.2.0 Stored XSS via BookingPageTagManager Analytics Tracking ID

    Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytics tracking ID withou…

    Cal.com Cal.com Self-Hosted (Cal.diy)