x
xxyopen
Security Risk Profile
43
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 55 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 10, 2022 to present
55
Total CVEs
44
Critical+High
0
Exploited
44
Unpatched
Threat Assessment
Avg CVSS
8.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
44
Critical/High
Risk Level
43/100
medium
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
32High
12Medium
8Low
3Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
31Age Distribution
Common Weaknesses (CWE)
1
SQL Injection
28
2
Malicious File Upload
6
3
XSS
5
4
Path Traversal
1
5
Code Injection
1
Most Affected Products
1. xxyopen Novel-Plus67
2. novel-plus novel-plus10
3. xxyopen Novel4
4. 201206030 2012060301
5. novel plus novel plus1
Recent Vulnerabilities
See more →CVE-2026-110104
CVSS 8.2high
novel through 3.5.0 Unsalted MD5 Password Storage
Oct 13, 2026🔧 No Patch
CVE-2025-65442
CVSS 6.1medium
Dec 29, 2025🔧 No Patch
CVE-2025-60298
CVSS 5.4medium
Oct 8, 2025🔧 No Patch
CVE-2025-60299
CVSS 5.4medium
Oct 8, 2025🔧 No Patch
CVE-2025-6535
CVSS 2.1EPSS 0%low
xxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injection
Jun 24, 2025🔧 No Patch
CVE-2025-6534
CVSS 1.3EPSS 0%low
xxyopen/201206030 novel-plus File FileController.java remove resource injection
Jun 24, 2025🔧 No Patch
CVE-2025-6533
CVSS 2.9EPSS 0%low
xxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replay
Jun 24, 2025🔧 No Patch
CVE-2025-45890
CVSS 9.8critical
Jun 20, 2025🔧 No Patch
CVE-2025-4036
CVSS 9.8EPSS 0%critical
201206030 Novel Chapter AuthorController.java updateBookChapter access control
Apr 28, 2025🔧 No Patch
CVE-2025-4019
CVSS 9.8EPSS 0%critical
20120630 Novel-Plus GeneratorController.java genCode missing authentication
Apr 28, 2025🔧 No Patch
Monitor xxyopen in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.