{"uuid": "b73b680c-d205-4205-aefe-6dd43d5d3366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-57858", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msvafnovck25", "content": "Cal.com Self-Hosted (Cal.diy) v2.1.1 \u2013 6.2.0 faces CRITICAL stored XSS (CVE-2026-57858) via BookingPageTagManager. Restrict event owner access & watch for patch news. \ud83d\udee1\ufe0f https://radar.offseq.com/threat/cve-2026-57858-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting...", "creation_timestamp": "2026-08-12T13:30:29.844684Z"}