What’s Vulnerable › Products

Cal.com Self-Hosted (Cal.diy) vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Cal.com Self-Hosted (Cal.diy) version is affected

Latest Cal.com Self-Hosted (Cal.diy) vulnerabilities

• CVE-2026-57858 — Cal.com Cal.diy 6.2.0 Stored XSS via BookingPageTagManager Analytics Tracking ID (CVSS 8.9)