We received a report from a third party security researching about a XSS vulnerability of our Javascript Web-Client when using the Preview and Debug Mode on April 3rd at 9am CEST.

We fixed the issue within the hour of receiving the report and deployed the fixed version right away.

We've informed all customers that are using our JavaScript Web-Client by email.

There is nothing you need to do on your side. You can safely continue using our JavaScript Web-Client. To our knowledge, the XSS vulnerability was not utilized in any attack.