n
novel-plus
Security Risk Profile
36
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 14, 2023 to present
10
Total CVEs
7
Critical+High
0
Exploited
7
Unpatched
Threat Assessment
Avg CVSS
7.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
7
Critical/High
Risk Level
36/100
low
Severity Distribution
Critical
4High
3Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
7Age Distribution
Common Weaknesses (CWE)
1
XSS
2
2
Malicious File Upload
1
3
SQL Injection
1
Most Affected Products
1. novel-plus novel-plus10
2. xxyopen Novel-Plus10
Recent Vulnerabilities
See more →CVE-2025-60298
CVSS 5.4medium
Oct 8, 2025🔧 No Patch
CVE-2025-60299
CVSS 5.4medium
Oct 8, 2025🔧 No Patch
CVE-2025-4019
CVSS 9.8EPSS 0%critical
20120630 Novel-Plus GeneratorController.java genCode missing authentication
Apr 28, 2025🔧 No Patch
CVE-2025-4018
CVSS 7.5EPSS 0%high
20120630 Novel-Plus CrawlController.java addCrawlSource missing authentication
Apr 28, 2025🔧 No Patch
CVE-2025-4017
CVSS 6.5EPSS 0%medium
20120630 Novel-Plus LogController.java list improper authorization
Apr 28, 2025🔧 No Patch
CVE-2025-4016
CVSS 9.1EPSS 0%critical
20120630 Novel-Plus LogController.java deleteIndex improper authorization
Apr 28, 2025🔧 No Patch
CVE-2025-4015
CVSS 7.5EPSS 0%high
20120630 Novel-Plus SessionController.java list missing authentication
Apr 28, 2025🔧 No Patch
CVE-2024-33383
CVSS 7.5EPSS 0%high
Apr 30, 2024🔧 No Patch
CVE-2024-25274
CVSS 9.8EPSS 0%critical
Feb 20, 2024🔧 No Patch
CVE-2023-37847
CVSS 9.8critical
Aug 14, 2023🔧 No Patch
Monitor novel-plus in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.