Advisories · Technology

xxyopen novel-plus.

Every CVE that names xxyopen novel-plus among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-6535 CVE record

CVSS 5.3 Medium

xxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injection
- xxyopen novel-plus
- 201206030 novel-plus
- Other injection
- SQL injection
Not analysed yet 24 Jun 2025
CVE-2025-6534 CVE record

CVSS 2.3 Low

xxyopen/201206030 novel-plus File FileController.java remove resource injection
- xxyopen novel-plus
- 201206030 novel-plus
- CWE-99
Not analysed yet 24 Jun 2025
CVE-2025-6533 CVE record

CVSS 6.3 Medium

xxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replay
- xxyopen novel-plus
- 201206030 novel-plus
- Authentication bypass
Not analysed yet 24 Jun 2025
CVE-2025-3856 CVE record

CVSS 5.3 Medium

xxyopen Novel-Plus searchByPage sql injection
- xxyopen Novel-Plus
- Other injection
- SQL injection
Not analysed yet 22 Apr 2025
CVE-2025-3676 CVE record

CVSS 5.3 Medium

xxyopen Novel-Plus books sql injection
- xxyopen Novel-Plus
- Other injection
- SQL injection
Not analysed yet 16 Apr 2025
CVE-2025-3369 CVE record

CVSS 5.3 Medium

xxyopen Novel-Plus list sql injection
- xxyopen Novel-Plus
- Other injection
- SQL injection
Not analysed yet 7 Apr 2025