xxyopen

Products

ProductCVEsExploitedLatest
Novel-Plus6–Jun 24, 2025
Novel2–Oct 13, 2026

Exploited and recent CVEs

  • CVE-2026-110104 Medium 5.9 novel through 3.5.0 Unsalted MD5 Password Storage 0.3%
  • CVE-2025-6535 Medium 6.3 xxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injection 0.5%
  • CVE-2025-6534 Medium 4.2 xxyopen/201206030 novel-plus File FileController.java remove resource injection 0.5%
  • CVE-2025-6533 Medium 5.6 xxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replay 0.6%
  • CVE-2025-3856 Medium 6.3 xxyopen Novel-Plus searchByPage sql injection 0.6%
  • CVE-2025-3676 Medium 6.3 xxyopen Novel-Plus books sql injection 0.6%
  • CVE-2025-3369 Medium 6.3 xxyopen Novel-Plus list sql injection 0.6%
  • CVE-2025-1154 Medium 6.3 xxyopen Novel books sql injection 0.3%