Clevertap vulnerabilities

Products

• Web Sdk 2

Newest

• clevertap web sdk CleverTap Web SDK is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage CVE-2026-26862 Fix available 8.3 HighFebruary 27, 2026
• clevertap web sdk CleverTap Web SDK is vulnerable to DOM-based XSS via handleCustomHtmlPreviewPostMessageEvent function CVE-2026-26861 Fix available 8.3 HighFebruary 27, 2026
• clevertap, clevertap cordova plugin +1 more CleverTap Cordova Plugin 2.6.2 - Reflected XSS CVE-2023-2507 Fix available 9.3 CriticalJuly 15, 2023