CVE-2026-26862 | CleverTap Web SDK up to 1.15.2 Visual Builder pageBuilder.js includes cross site scripting (Issue 442)

A vulnerability categorized as problematic has been discovered in CleverTap Web SDK up to 1.15.2. This vulnerability affects the function includes of the file src/modules/visualBuilder/pageBuilder.js of the component Visual Builder Module. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-26862. It is possible to launch the attack remotely. No exploit is available.

It is best practice to apply a patch to resolve this issue.