Cal.com vulnerabilities

Newest

• cal.com self-hosted (cal.diy) Cal.com Cal.diy 6.2.0 Stored XSS via BookingPageTagManager Analytics Tracking ID CVE-2026-57858 Public exploit 9.3 CriticalAugust 12, 2026
• cal.com cal.diy CVE-2026-16624 CVE-2026-16624 9.6 CriticalJuly 22, 2026
• cal.com WordPress Cal.com plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-31604 6.5 MediumMarch 31, 2025