<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: sfs</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-7104: Improper Control of Generation of Code (&#x27;Code Injection&#x27;) vulnerability in SFS Consulting ww.Winsure allows Co</title><link>https://patchthecve.com/cve/CVE-2024-7104.html</link><guid>https://patchthecve.com/cve/CVE-2024-7104.html</guid><pubDate>Wed, 17 Jun 2026 08:19:22 +0000</pubDate><description>CRITICAL 9.8: Improper Control of Generation of Code (&#x27;Code Injection&#x27;) vulnerability in SFS Consulting ww.Winsure allows Code Injection.

This issue affects ww.Winsure: before 4.6.2.</description></item><item><title>CVE-2024-7098: Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML In</title><link>https://patchthecve.com/cve/CVE-2024-7098.html</link><guid>https://patchthecve.com/cve/CVE-2024-7098.html</guid><pubDate>Wed, 17 Jun 2026 08:19:21 +0000</pubDate><description>CRITICAL 9.8: Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection.

This issue affects ww.Winsure: before 4.6.2.</description></item><item><title>CVE-2024-6401: Improper Neutralization of Special Elements used in an SQL Command (&#x27;SQL Injection&#x27;) vulnerability in SFS Cons</title><link>https://patchthecve.com/cve/CVE-2024-6401.html</link><guid>https://patchthecve.com/cve/CVE-2024-6401.html</guid><pubDate>Wed, 17 Jun 2026 08:17:56 +0000</pubDate><description>CRITICAL 9.8: Improper Neutralization of Special Elements used in an SQL Command (&#x27;SQL Injection&#x27;) vulnerability in SFS Consulting InsureE GL allows SQL Injection.

This issue affects InsureE GL: before 4.6.2.</description></item></channel></rss>