Vulnerabilities in neofix

2 results
CVE-2024-13594MEDIUMSimple Downloads List <= 1.4.2 - Authenticated (Contributor+) SQL InjectionEPSS 0.4%CVE-2025-12583MEDIUMSimple Downloads List <= 1.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingEPSS 0.2%