https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T08:19:07.430934+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-24023 CVE-2024-24023 2026-10-10T08:19:08.156653+00:00

Affected: xxyopen novel-plus

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to perform SQL injection via /novel/bookContent/list.