ClickLearn UXP

ID: fokjmhmlakeamckboogadojiadmijnac

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

3.0.0.9

Size

0.04 MB

Rating

5.0/5

Reviews

Users

9,000

Type

Extension

Updated

Jul 8, 2026

Publisher Contextual Analysis

Author: ClickLearnView Profile
Privacy: Privacy Policy
Help: Help Center
Country: DK
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: Dyssegårdsvej 49 Dyssegård 2870 DK
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

58,838

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

ClickLearn User Experience Panel

A new era in enterprise learning. The first digital adoption platform with a non-disruptive learning experience. The extension offers a streamlined and AI-driven solution to software training challenges. Benefiting from a suite of new features, it integrates an advanced digital assistant, the User Experience Panel (UXP), enhancing productivity across your entire software stack. Key Features: ✅ AI-Powered In-App Guidance: Personalized step-by-step instructions and video tutorials for using any system. ✅ Automated Employee Onboarding: UXP recognizes user roles for targeted, real-time software guidance. ✅ Learning Integrated into Workflows: Access help and updates without leaving your work system, minimizing interruptions. ✅ AI-Powered Chat: Get authoritative assistance on any company or software-specific topics anytime. ✅ Centralized Updates: Get timely 'What's new'-guidance and personalized notifications. ✅ Raise Collective Knowledge: Maintain company wisdom within the software, improving overall effectiveness. ✅ Universal System Compatibility: Supports training across your entire software stack. Touted as a one-stop solution, ClickLearn aims to simplify software learning and promote instant productivity from day one.

User Growth

Showing data from Nov 12, 2023 to Nov 10, 2024

Versions

+12.5%(+1,000 users)

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 8 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High6

Medium0

Low1

Versions scanned

Showing 1 of 6 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.0.0.5 Code review	10

Extension Version	Code Review Findings
3.0.0.5	10

Files with findings

4 distinct paths — top paths by unique finding count:

cl-cs-uxp.js4
cl-bkg-uxp.js3
cl-popup-uxp.js2
cl-xhr-uxp.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	cl-cs-uxp.js (line 299)	Code received over message-passing (msg.cod) is passed to the obfuscated `eval` reference (window['eval']) AND injected into the page DOM as a <script> tag. The payload originates from the background service worker, w…	3.0.0.5
2	Remote Code Loading	critical	cl-cs-uxp.js (line 329)	A third location uses the same obfuscated `eval` reconstruction trick to execute the `clgccf` payload received from the background script (originating from apps.clicklearn.com). The payload is also DOM-injected. Repea…	3.0.0.5
3	Remote Code Loading	critical	cl-bkg-uxp.js (line 152)	The background service worker fetches a remote .txt file from apps.clicklearn.com/clgccf2.txt and stores its body as JavaScript source ('clgccf'). This text is then forwarded to content scripts and executed via the ob…	3.0.0.5
4	Credential Theft	high	cl-popup-uxp.js (line 359)	The popup's window message listener accepts messages whose origin merely contains the substring 'clicklearn.com' / '.dk' / '.in' anywhere — a substring check, not a hostname match. An attacker-controlled origin like…	3.0.0.5
5	Network Interception	high	cl-xhr-uxp.js (line 9)	Content script declared with world:'MAIN' (per manifest) globally monkey-patches XMLHttpRequest.prototype.open and .send on every page (matches <all_urls>). It records request URLs and parses response bodies for any U…	3.0.0.5
6	Obfuscation	high	cl-cs-uxp.js (line 107)	The string 'eval' is deliberately obfuscated by concatenating individual characters with hex escapes (\x76 = 'v', \x61 = 'a') to construct `window['eval']`, then invoked on a dynamically-built string. This obfuscation…	3.0.0.5
7	Privilege Escalation	high	cl-bkg-uxp.js (line 918)	Background acts as an authenticated HTTP proxy: it accepts arbitrary URLs and Bearer tokens from page-level postMessages (via the content script bridge in cl-cs-uxp.js) and issues fetches with Authorization headers, r…	3.0.0.5
8	Privilege Escalation	high	cl-cs-uxp.js (line 15)	The content script blindly relays page-origin window.postMessage events to the background service worker without verifying event.origin. Any web page (matches=<all_urls>) can therefore send 'clAssistAjaxRequest' messa…	3.0.0.5
9	Unauthorized Data Collection	high	cl-bkg-uxp.js (line 874)	Background captures a screenshot of the active tab via chrome.tabs.captureVisibleTab whenever any content script (on any URL, since matches=<all_urls>) sends a 'clAssistAjaxRequest' with action='BrowserImage'. The cap…	3.0.0.5
10	Other	low	cl-popup-uxp.js (line 353)	A 'Configuration' button in the popup attempts to open a hard-coded developer file:// URL on the local Windows filesystem. While this fails harmlessly on end-user machines, it indicates the published extension was shi…	3.0.0.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


portal.clicklearn.com	-	https://portal.clicklearn.com
portalapi.clicklearn.com	-	https://portalapi.clicklearn.com
login.content.eu.clicklearn.com	-	https://login.content.eu.clicklearn.com/
portal.development.clicklearn.dk	-	https://portal.development.clicklearn.dk
login.content.dev-westeu.clicklearn.dk	-	https://login.content.dev-westeu.clicklearn.dk/
portalapi.development.clicklearn.dk	-	https://portalapi.development.clicklearn.dk
portal.localhost.clicklearn.com	-	https://portal.localhost.clicklearn.com:44303/
login.localhost.clicklearn.com	-	https://login.localhost.clicklearn.com:44301/
portalapi.localhost.clicklearn.com	-	https://portalapi.LOCALHOST.clicklearn.com:44301
portal-india-development.clicklearn.in	-	https://portal-india-development.clicklearn.in/

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

5.0 out of 5 · 3 most recent reviews

Text reviews

Positive

Negative

The AI I really want. I like having all my training materials easily at hand with ClickLearn. The help is actually available inside system, while you are working, so there isn't a need to switch back and forth between applications. The AI chat is very useful for providing company-specific information that can be set up according to what our users need to see, when.

Laura Reininger·2 Feb 2024

Great extension from ClickLearn! Now I can learn and get guidance while I work in my CRM system.

Anders Holm·2 Feb 2024

A helpfull ClickLearn extension when working in Microsoft Dynamics CRM! I just ask the chat for help when I need guidance for a process.

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

ClickLearn UXP

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 6 Versions10

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating