Crowd Favorite vulnerabilities
We track 2 vulnerabilities in Crowd Favorite products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.
2vulnerabilities
1critical
1high
0exploited
8.2average CVSS score
Latest Crowd Favorite vulnerabilities
- 9.3 Critical severity
DXP ToolKit: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd Favorite DXP ToolKit dxp-toolkit allows SQL Injection.This issue affects DXP ToolKit: from n/a through 2.0.1.
- 7.1 High severity
DXP ToolKit: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crowd Favorite DXP ToolKit dxp-toolkit allows Stored XSS.This issue affects DXP ToolKit: from n/a through 2.0.1.