CVE-2025-51684 | CleverTap Web SDK 1.15.1 postMessage renderCustomHtml cross site scripting

July 30, 2026 Yanac

A vulnerability identified as problematic has been detected in CleverTap Web SDK 1.15.1. This affects the function renderCustomHtml of the component postMessage. This manipulation of the argument Message causes cross site scripting.

This vulnerability is registered as CVE-2025-51684. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More