Skip to contentXxyopen Novel-plus vulnerabilities
- xxyopen novel-plusNovel-Plus with 5.2.0 was discovered to contain a Stored Cross-Site Scripting (XSS) vulnerability...CVE-2025-602995.4 Medium
- xxyopen novel-plusNovel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting (XSS)...CVE-2025-602985.4 Medium
- 201206030 novel-plusxxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injectionCVE-2025-65355.3 Medium
- 201206030 novel-plusxxyopen/201206030 novel-plus File FileController.java remove resource injectionCVE-2025-65342.3 Low
- 201206030 novel-plusxxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replayCVE-2025-65336.3 Medium
- xxyopen novel-plusDirectory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to...CVE-2025-458909.8 Critical
- 201206030 novel-plus20120630 Novel-Plus GeneratorController.java genCode missing authenticationCVE-2025-40196.9 Medium
- 201206030 novel-plus20120630 Novel-Plus CrawlController.java addCrawlSource missing authenticationCVE-2025-40186.9 Medium
- 201206030 novel-plus20120630 Novel-Plus LogController.java list improper authorizationCVE-2025-40175.3 Medium
- 201206030 novel-plus20120630 Novel-Plus LogController.java deleteIndex improper authorizationCVE-2025-40165.3 Medium
- 201206030 novel-plus20120630 Novel-Plus SessionController.java list missing authenticationCVE-2025-40156.9 Medium
- 201206030 novel-plusxxyopen Novel-Plus searchByPage sql injectionCVE-2025-38565.3 Medium
- 201206030 novel-plusxxyopen Novel-Plus books sql injectionCVE-2025-36765.3 Medium
- 201206030 novel-plusxxyopen Novel-Plus list sql injectionCVE-2025-33695.3 Medium
- xxyopen novel-plusAn issue in xxyopen novel plus v.4.4.0 and before allows a remote attacker to execute arbitrary...CVE-2025-261826.5 Medium
- novel-plusArbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to...CVE-2024-333837.5 High
- novel-plusAn arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1...CVE-2024-252749.8 Critical
- xxyopen novel-plusAn arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions at com...CVE-2024-240269.8 Critical
- xxyopen novel-plusAn arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb...CVE-2024-240259.8 Critical
- xxyopen novel-plusAn arbitrary File download vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb...CVE-2024-240249.8 Critical
- xxyopen novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass...CVE-2024-240239.8 Critical
- xxyopen novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass...CVE-2024-240219.8 Critical
- xxyopen novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...CVE-2024-240189.8 Critical
- novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...CVE-2024-240179.8 Critical
- xxyopen novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...CVE-2024-240149.8 Critical
- xxyopen novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...CVE-2024-240199.8 Critical
- xxyopen novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...CVE-2024-240159.8 Critical
- xxyopen novel-plusA SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...CVE-2024-240139.8 Critical
- 201206030 novel-plusNovel-Plus list sql injectionCVE-2024-09415.5 Medium
- 201206030 novel-plusNovel-Plus list sql injectionCVE-2024-06555.5 Medium
- 201206030 novel-plusNovel-Plus Friendly Link FriendLinkController.java cross site scriptingCVE-2023-71712.4 Low
- 201206030 novel-plusNovel-Plus HTTP POST Request updateUserInfo cross site scriptingCVE-2023-71663.5 Low
- xxyopen novel-plusSQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary...CVE-2023-469819.8 Critical
- xxyopen novel-plusSQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary...CVE-2023-414437.2 High
- xxyopen novel-plusnovel-plus 3.6.2 is vulnerable to SQL Injection.CVE-2023-300589.8 Critical
- xxyopen novel-plusnovel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.CVE-2023-378479.8 Critical
- 201206030 novel-plusnovel-plus sql injectionCVE-2023-20416.3 Medium
- 201206030 novel-plusnovel-plus sql injectionCVE-2023-20406.3 Medium
- 201206030 novel-plusnovel-plus sql injectionCVE-2023-20396.3 Medium
- 201206030 novel-plusnovel-plus list sql injectionCVE-2023-16074.7 Medium
- 201206030 novel-plusnovel-plus DictController.java sql injectionCVE-2023-16066.3 Medium
- 201206030 novel-plusnovel-plus list sql injectionCVE-2023-15954.7 Medium
- 201206030 novel-plusnovel-plus list MenuService sql injectionCVE-2023-15947.3 High
- xxyopen novel-plusNovel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config...CVE-2022-366729.8 Critical
- xxyopen novel-plusNovel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the...CVE-2022-366717.5 High
- xxyopen novel-plusNovel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword...CVE-2022-351219.8 Critical
- xxyopen novel-plusUnrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller...CVE-2021-429679.8 Critical
- xxyopen novel-plusnovel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability.CVE-2022-284627.5 High
- xxyopen novel-plusnovel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can...CVE-2021-419219.8 Critical
- xxyopen novel-plusNovel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user...CVE-2022-245689.8 Critical