CVE-2025-51684

CVE-2025-51684 affects CleverTap Web SDK v1.15.1. The issue is a Cross Site Scripting (XSS) vulnerability where untrusted data received via window.postMessage is not sanitized before being injected into the DOM by renderCustomHtml. This allows an attacker to craft a message that executes arbitrar...