HIGH8.3npm
GHSA-j5mf-6rh3-rhgg· CVE-2026-26861CleverTap Web SDK is vulnerable to DOM-based XSS via handleCustomHtmlPreviewPostMessageEvent function
Modified: 3/4/2026
package
pkg:npm/clevertap-web-sdk
CleverTap Web SDK is vulnerable to DOM-based XSS via handleCustomHtmlPreviewPostMessageEvent function
Modified: 3/4/2026
CleverTap Web SDK is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage
Modified: 3/4/2026