Skip to content
OpenAdvisories

Vendor

calcom

15 known vulnerabilities.

Products

cal.diy 11 cal.com 5 calcom/cal.com 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.9
    CVE-2024-58355

    Cal.com through 4.7.15 Cross-Site Scripting via booking questions

    Cal.com (calcom/cal.diy) versions through 4.7.15 contain a stored cross-site scripting vulnerability. The single booking view (e.g., https://app.cal.com/booking/<id>) renders booking-question field labels via React's dangerouslySetInnerHTML without sanitizing…

    calcom cal.diy
  • High 8.9
    CVE-2024-58353

    Cal.com through 4.7.15 Cross-Site Scripting via booking questions

    Cal.com (repository calcom/cal.diy) in versions <= 4.7.15 is vulnerable to cross-site scripting (XSS) on the publicly accessible single booking view (e.g., /booking/<id>). Booking question (form field) labels are rendered via React's dangerouslySetInnerHTML w…

    calcom cal.diy
  • High 8.8
    CVE-2023-1647

    Improper Access Control in calcom/cal.com

    Improper Access Control in GitHub repository calcom/cal.com prior to 2.7.

    calcom calcom/cal.com