Home › CVE Intelligence › CVE-2024-58355
CVSS 8.9 HIGH Vulnerability

CVE-2024-58355: Cal.com (calcom/cal.diy) versions through 4.7.15 contain a stored cross-site scripting vu…

Cal.com (calcom/cal.diy) versions through 4.7.15 contain a stored cross-site scripting vulnerability. The single booking view (e.g., https://app.cal.com/booking/) renders booking-question field labels via React's danger…

8.9CVSS Score
HIGHSeverity
NOCISA KEV
0.3%EPSS Score
VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2024-58355
VendorUnknown Vendor
Affected ProductUnknown Product
Vulnerability TypeVulnerability
CVSS Score8.9 (HIGH)
EPSS Score0.3% probability of exploitation in the next 30 days
Actively Exploited❌ No known exploitation
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

Cal.com (calcom/cal.diy) versions through 4.7.15 contain a stored cross-site scripting vulnerability. The single booking view (e.g., https://app.cal.com/booking/) renders booking-question field labels via React's dangerouslySetInnerHTML without sanitizing or escaping user input. ... [Full analysis available on Pro]

🎯 Known Indicators of Compromise

{"type":"url","value":"https://app.cal.com/booking/)","confidence_score":0.82,"first_seen":"2026-07-25","source_count":1} {"type":"domain","value":"cal.com","confidence_score":0.75,"first_seen":"2026-07-25","source_count":1} {"type":"domain","value":"app.cal.com","confidence_score":0.75,"first_seen":"2026-07-25","source_count":1}
⚡ DETECTION RULES AVAILABLE

Get CVE-2024-58355 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence