CleverTap

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

CleverTap records in CISA KEV

No CleverTap vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Clevertap Web Sdk 2 records HIGH Clevertap 1 record HIGH

Records

2 records in Clevertap Web Sdk · all components

TI-2026-21400 CVE-2026-26862 · GHSA-jfrq-hj9f-c8qx

CleverTap Web SDK version 1.15.2 and earlier is vulnerable to DOM-based Cross-Site…

HIGH 69

CleverTap Web SDK version 1.15.2 and earlier is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage in the Visual Builder module.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00422 Published 2026-02-27 Fixed in 1.15.3 CWE-79

TI-2026-21399 CVE-2026-26861 · GHSA-j5mf-6rh3-rhgg

CleverTap Web SDK version 1.15.2 and earlier is vulnerable to Cross-Site Scripting (XSS)…

HIGH 69

CleverTap Web SDK version 1.15.2 and earlier is vulnerable to Cross-Site Scripting (XSS) via window.postMessage.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00205 Published 2026-02-27 Fixed in 1.15.3 CWE-346

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0