https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-22T23:46:58.410483+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2025-51684 fkie_cve-2025-51684 2026-10-22T23:46:58.412196+00:00

CleverTap Web SDK v1.15.1 is vulnerable to Cross Site Scripting (XSS). The application does not sanitize untrusted data received via window.postMessage before injecting it into the page DOM. An attacker can craft a malicious message that, when processed by renderCustomHtml, results in execution of arbitrary JavaScript in the context of the hosting site.

 https://db.gcve.eu/vuln/ghsa-72f8-2pfx-xx29 GHSA-72f8-2pfx-xx29 2026-10-22T23:46:58.412250+00:00

CleverTap Web SDK v1.15.1 is vulnerable to Cross Site Scripting (XSS). The application does not sanitize untrusted data received via window.postMessage before injecting it into the page DOM. An attacker can craft a malicious message that, when processed by renderCustomHtml, results in execution of arbitrary JavaScript in the context of the hosting site.