CVE-2025-26182

CVE-2025-26182 affects xxyopen novel plus prior to 4.4.0. The vulnerability allows a remote attacker to execute arbitrary code via the PageController.java file. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N with base score 6.5 (MEDIUM). Connected sources corroborate the issue and men...