Threats tagged 'ghsa-2478-mm55-gm6c'

A stored cross-site scripting (XSS) vulnerability exists in Crowd Favorite DXP ToolKit up to version 2.0.1. This vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts that execute in users' browsers. The vulnerability has a high severity score of 7.1 (CVSS 3.1) and affects confidentiality, integrity, and availability.