2 matches found
CVE-2022-24568
Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user-supplied crafted input.
CVE-2022-28462
novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability.