HIGH8.3npm
GHSA-j5mf-6rh3-rhgg· CVE-2026-26861CleverTap Web SDK is vulnerable to DOM-based XSS via handleCustomHtmlPreviewPostMessageEvent function
Modified: 3/4/2026
package
npm/clevertap-web-sdk
pkg:npm/clevertap-web-sdk
HIGH8.3npm
GHSA-jfrq-hj9f-c8qx· CVE-2026-26862CleverTap Web SDK is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage
Modified: 3/4/2026