Cal.com

3 CVEs across 3 Cal.com products. Browse Cal.com vulnerabilities, severities, and proof-of-concept exploits.

Cal.com products with known CVEs

ProductCVEs
Cal.com1
Cal.com Self-Hosted (Cal.diy)1
Cal.diy1
Cal.com CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57858High8.92026-08-12Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticat…
CVE-2026-16624Critical9.62026-07-22Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on any team via unvalidated teamId inject…
CVE-2025-31604Medium6.52025-03-31Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cal.com Cal.com cal-com allows Stored XSS.This issue affects Cal…