neofix

Products

ProductCVEsExploitedLatest
Simple Downloads List2–Nov 8, 2025

Exploited and recent CVEs

  • CVE-2025-12583 Medium 6.4 Simple Downloads List <= 1.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
  • CVE-2024-13594 Medium 6.5 Simple Downloads List <= 1.4.2 - Authenticated (Contributor+) SQL Injection 0.4%