Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Clevertap
Web Sdk
Clevertap Web Sdk vulnerabilities
clevertap
web sdk
CleverTap Web SDK is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage
CVE-2026-26862
Fix available
8.3
High
February 27, 2026
clevertap
web sdk
CleverTap Web SDK is vulnerable to DOM-based XSS via handleCustomHtmlPreviewPostMessageEvent function
CVE-2026-26861
Fix available
8.3
High
February 27, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open