Cal.com Cal.diy vulnerabilities

• cal.com self-hosted (cal.diy) Cal.com Cal.diy 6.2.0 Stored XSS via BookingPageTagManager Analytics Tracking ID CVE-2026-57858 Public exploit 9.3 CriticalAugust 12, 2026
• cal.com cal.diy CVE-2026-16624 CVE-2026-16624 9.6 CriticalJuly 22, 2026