This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
OffSequence
offseq.bsky.social
did:plc:t5t6qep2vfipbi7f54demwev
Cal.com Self-Hosted (Cal.diy) v2.1.1 – 6.2.0 faces CRITICAL stored XSS (CVE-2026-57858) via BookingPageTagManager. Restrict event owner access & watch for patch news. 🛡️ https://radar.offseq.com/threat/cve-2026-57858-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting...
https://radar.offseq.com/threat/cve-2026-57858-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-953e719dabfd2c11
2026-08-12T13:30:29.274Z