Lucene search
+L

4 matches found

NVD
NVD
•added 2025/10/08 1:15 p.m.•26 views

CVE-2025-60298

Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting XSS vulnerability via the /author/updateIndexName endpoint. This vulnerability allows authenticated attackers to inject malicious JavaScript code through the indexName parameter, which gets stored in the database and...

5.4CVSS0.00263EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/08 12:00 a.m.•19 views

EUVD-2025-33176

Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting XSS vulnerability via the /author/updateIndexName endpoint. This vulnerability allows authenticated attackers to inject malicious JavaScript code through the indexName parameter, which gets stored in the database and...

5.4CVSS5.7AI score0.00263EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/10/08 12:00 a.m.•36 views

CVE-2025-60298

Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting XSS vulnerability via the /author/updateIndexName endpoint. This vulnerability allows authenticated attackers to inject malicious JavaScript code through the indexName parameter, which gets stored in the database and...

0.00263EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/10/08 12:00 a.m.•21 views

CVE-2025-60298

Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting XSS vulnerability via the /author/updateIndexName endpoint. This vulnerability allows authenticated attackers to inject malicious JavaScript code through the indexName parameter, which gets stored in the database and...

5.4CVSS5.7AI score
SaveExploits0References5
Rows per page
Query Builder