CVE-2024-24021

Summary: CVE-2024-24021 is a SQL injection vulnerability in Novel-Plus up to version 4.3.0-RC1, exploitable via the /novel/userFeedback/list endpoint by passing crafted offset, limit, and sort parameters. The CVSS v3.1 vector indicates a critical impact (Network attack, no privileges, no user int...