201206030 novel-plus

• CVE-2026-90941 Medium 4.3 novel-plus through 5.3.3 Missing Authorization on the Admin Book Download Endpoint 0.4%
• CVE-2026-90940 Medium 5.3 novel-plus through 5.3.3 Default Cache Management Password in the Front Portal 0.5%
• CVE-2026-90939 Medium 6.5 novel-plus through 5.3.3 Missing Authorization on the Admin /sys/user/list Endpoint 0.5%
• CVE-2025-6535 Medium 6.3 xxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injection 0.5%
• CVE-2025-6534 Medium 4.2 xxyopen/201206030 novel-plus File FileController.java remove resource injection 0.5%
• CVE-2025-6533 Medium 5.6 xxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replay 0.6%