CVE-2025-60298

The online social reading and writing platform Novel-Plus is vulnerable to a Stored Cross-Site Scripting (XSS) flaw in versions up to and including 5.2.4 . The root cause is the unvalidated input of the indexName parameter via the /author/updateIndexName API endpoint. This allows authenticated at...