CVE-2025-51684

CVE-2025-51684 affects CleverTap Web SDK v1.15.1. The issue is a Cross Site Scripting (XSS) vulnerability where untrusted data received via window.postMessage is not sanitized before being injected into the DOM by renderCustomHtml. This allows an attacker to craft a message that executes arbitrar...

EUVD-2025-210564

CleverTap Web SDK v1.15.1 is vulnerable to Cross Site Scripting XSS. The application does not sanitize untrusted data received via window.postMessage before injecting it into the page DOM. An attacker can craft a malicious message that, when processed by renderCustomHtml, results in execution of...