Skip to content
OpenAdvisories

Vendor

Cal.com

3 known vulnerabilities.

Products

Cal.diy 1 Cal.com 1 Cal.com Self-Hosted (Cal.diy) 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-31604

    WordPress Cal.com plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cal.com Cal.com cal-com allows Stored XSS.This issue affects Cal.com: from n/a through <= 1.0.0.

    Cal.com Cal.com