Login Request a demo
SD
Product
Simple Downloads List
by neofix · last CVE Nov 8, 2025
2
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 0
Severity
All severities2Critical0High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Simple Downloads List to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-13594
6.5
0%
Jan 24
Simple Downloads List <= 1.4.2 - Authenticated (Contributor+) SQL Injection
Affected: through 1.4.2
CVE-2025-12583
6.4
0%
Nov 8
Simple Downloads List <= 1.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Affected: through 1.4.3
Showing 2