TI-2019-15628 CVE-2019-25575 · GHSA-gfv2-c97j-jcxpSimplePress CMS 1.0.7 SQL Injection via p and s ParametersPriority HIGH 77SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'p' and 's' parameters.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00351 · Published 2026-03-21 · No fix listed CWE-89