Novel-Plus
xxyopen
- Product type
- Other
- Catalog vulnerabilities
- 50
Severity across 6 analyzed records
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 09/18/2026, within CyStack's analyzed data, Novel-Plus has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Novel-Plus and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2025-60299 | Exploitation statusPublic exploit | FixNot confirmed | Published10/08/2025 | SeverityMedium |
CVE-2025-60298 | Exploitation statusPublic exploit | FixNot confirmed | Published10/08/2025 | SeverityMedium |
CVE-2025-6535xxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published06/24/2025 | SeverityMedium |
CVE-2025-6534xxyopen/201206030 novel-plus File FileController.java remove resource injection | Exploitation statusPublic exploit | FixNot confirmed | Published06/24/2025 | SeverityLow |
CVE-2025-6533xxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replay | Exploitation statusPublic exploit | FixNot confirmed | Published06/24/2025 | SeverityMedium |
CVE-2025-45890 | Exploitation statusPublic exploit | FixNot confirmed | Published06/20/2025 | SeverityCritical |
CVE-2025-401920120630 Novel-Plus GeneratorController.java genCode missing authentication | Exploitation statusPublic exploit | FixNot confirmed | Published04/28/2025 | SeverityMedium |
CVE-2025-401820120630 Novel-Plus CrawlController.java addCrawlSource missing authentication | Exploitation statusPublic exploit | FixNot confirmed | Published04/28/2025 | SeverityMedium |
CVE-2025-401720120630 Novel-Plus LogController.java list improper authorization | Exploitation statusPublic exploit | FixNot confirmed | Published04/28/2025 | SeverityMedium |
CVE-2025-401620120630 Novel-Plus LogController.java deleteIndex improper authorization | Exploitation statusPublic exploit | FixNot confirmed | Published04/28/2025 | SeverityMedium |
CVE-2025-401520120630 Novel-Plus SessionController.java list missing authentication | Exploitation statusPublic exploit | FixNot confirmed | Published04/28/2025 | SeverityMedium |
CVE-2025-3856xxyopen Novel-Plus searchByPage sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published04/22/2025 | SeverityMedium |
CVE-2025-3676xxyopen Novel-Plus books sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published04/16/2025 | SeverityMedium |
CVE-2025-3369xxyopen Novel-Plus list sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published04/07/2025 | SeverityMedium |
CVE-2025-26182 | Exploitation statusNot known exploited | FixNot confirmed | Published03/04/2025 | SeverityMedium |
CVE-2024-33383 | Exploitation statusPublic exploit | FixNot confirmed | Published04/30/2024 | SeverityHigh |
CVE-2024-25274 | Exploitation statusNot known exploited | FixNot confirmed | Published02/20/2024 | SeverityCritical |
CVE-2024-24017 | Exploitation statusNot known exploited | FixNot confirmed | Published02/08/2024 | SeverityHigh |
CVE-2024-24024 | Exploitation statusNot known exploited | FixNot confirmed | Published02/08/2024 | SeverityCritical |
CVE-2024-24023 | Exploitation statusNot known exploited | FixNot confirmed | Published02/08/2024 | SeverityCritical |
CVE-2024-24026 | Exploitation statusNot known exploited | FixNot confirmed | Published02/08/2024 | SeverityCritical |
CVE-2024-24021 | Exploitation statusNot known exploited | FixNot confirmed | Published02/08/2024 | SeverityCritical |
CVE-2024-24025 | Exploitation statusNot known exploited | FixNot confirmed | Published02/08/2024 | SeverityCritical |
CVE-2024-24018 | Exploitation statusNot known exploited | FixNot confirmed | Published02/08/2024 | SeverityCritical |
CVE-2024-24014 | Exploitation statusNot known exploited | FixNot confirmed | Published02/08/2024 | SeverityCritical |
CVE-2024-24019 | Exploitation statusNot known exploited | FixNot confirmed | Published02/07/2024 | SeverityCritical |
CVE-2024-24013 | Exploitation statusNot known exploited | FixNot confirmed | Published02/06/2024 | SeverityCritical |
CVE-2024-24015 | Exploitation statusNot known exploited | FixNot confirmed | Published02/06/2024 | SeverityCritical |
CVE-2024-0941Novel-Plus list sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/26/2024 | SeverityMedium |
CVE-2024-0655Novel-Plus list sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/18/2024 | SeverityMedium |
CVE-2023-7171Novel-Plus Friendly Link FriendLinkController.java cross site scripting | Exploitation statusPublic exploit | FixYes | Published12/29/2023 | SeverityLow |
CVE-2023-7166Novel-Plus HTTP POST Request updateUserInfo cross site scripting | Exploitation statusPublic exploit | FixYes | Published12/29/2023 | SeverityLow |
CVE-2023-46981 | Exploitation statusPublic exploit | FixNot confirmed | Published11/04/2023 | SeverityUnknown |
CVE-2023-41443 | Exploitation statusPublic exploit | FixNot confirmed | Published09/18/2023 | SeverityUnknown |
CVE-2023-30058 | Exploitation statusPublic exploit | FixNot confirmed | Published09/11/2023 | SeverityUnknown |
CVE-2023-37847 | Exploitation statusNot known exploited | FixNot confirmed | Published08/14/2023 | SeverityUnknown |
CVE-2023-2041novel-plus sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published04/14/2023 | SeverityMedium |
CVE-2023-2040novel-plus sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published04/14/2023 | SeverityMedium |
CVE-2023-2039novel-plus sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published04/14/2023 | SeverityMedium |
CVE-2023-1607novel-plus list sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published03/23/2023 | SeverityMedium |
CVE-2023-1606novel-plus DictController.java sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published03/23/2023 | SeverityMedium |
CVE-2023-1595novel-plus list sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published03/23/2023 | SeverityMedium |
CVE-2023-1594novel-plus list MenuService sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published03/23/2023 | SeverityHigh |
CVE-2022-36672 | Exploitation statusNot confirmed | FixNot confirmed | Published09/01/2022 | SeverityUnknown |
CVE-2022-36671 | Exploitation statusNot confirmed | FixNot confirmed | Published09/01/2022 | SeverityUnknown |
CVE-2022-35121 | Exploitation statusNot confirmed | FixNot confirmed | Published08/17/2022 | SeverityUnknown |
CVE-2021-42967 | Exploitation statusNot confirmed | FixNot confirmed | Published05/13/2022 | SeverityUnknown |
CVE-2022-28462 | Exploitation statusNot confirmed | FixNot confirmed | Published05/05/2022 | SeverityUnknown |
CVE-2021-41921 | Exploitation statusNot confirmed | FixNot confirmed | Published04/28/2022 | SeverityUnknown |
CVE-2022-24568 | Exploitation statusNot confirmed | FixNot confirmed | Published02/10/2022 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
