Xxyopen Novel vulnerabilities
- xxyopen novel-plusNovel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config...9.8 Critical
- xxyopen novel-plusNovel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the...7.5 High
- xxyopen novel-plusNovel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword...9.8 Critical
- xxyopen novel-plusUnrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller...9.8 Critical
- xxyopen novel-plusnovel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability.7.5 High
- xxyopen novel-plusnovel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can...9.8 Critical
- xxyopen novel-plusNovel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user...9.8 Critical