201206030 Novel-Plus
6 CVEs affecting 201206030 Novel-Plus. Latest disclosed: 2026-09-14. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-90939 | Medium | 6.5 | 2026-09-14 | novel-plus through 5.3.3 contains an information disclosure vulnerability in the /sys/user/list endpoint that lacks proper permission annotations. Authenticate… |
CVE-2025-6535 | Medium | 6.3 | 2025-06-24 | A vulnerability has been found in xxyopen/201206030 novel-plus up to 5.1.3 and classified as critical. This vulnerability affects the function list of the file… |
CVE-2025-6533 | Medium | 5.6 | 2025-06-24 | A vulnerability, which was classified as critical, has been found in xxyopen/201206030 novel-plus up to 5.1.3. Affected by this issue is the function ajaxLogin… |
CVE-2026-90940 | Medium | 5.3 | 2026-09-14 | novel-plus through 5.3.3 contains an insecure default cache-management password in the CacheController.refreshCache endpoint that allows anonymous attackers to… |
CVE-2026-90941 | Medium | 4.3 | 2026-09-14 | novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated backend accounts to e… |
CVE-2025-6534 | Medium | 4.2 | 2025-06-24 | A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affects the function remove of the file novel… |