2201206030

Products

Exploited and recent CVEs

• CVE-2026-90941 Medium 4.3 novel-plus through 5.3.3 Missing Authorization on the Admin Book Download Endpoint 0.4%
• CVE-2026-90940 Medium 5.3 novel-plus through 5.3.3 Default Cache Management Password in the Front Portal 0.5%
• CVE-2026-90939 Medium 6.5 novel-plus through 5.3.3 Missing Authorization on the Admin /sys/user/list Endpoint 0.5%
• CVE-2025-6535 Medium 6.3 xxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injection 0.5%
• CVE-2025-6534 Medium 4.2 xxyopen/201206030 novel-plus File FileController.java remove resource injection 0.5%
• CVE-2025-6533 Medium 5.6 xxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replay 0.6%
• CVE-2025-4036 Medium 6.3 201206030 Novel Chapter AuthorController.java updateBookChapter access control 0.5%
• CVE-2025-3956 Medium 6.3 201206030 novel-cloud BookInfoMapper.xml RestResp sql injection 0.5%