CVE-2021-41921: Xxyopen Novel-Plus

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution.

Affected products

• Xxyopen Novel-Plus: version 3.6.1 only

Published 2022-04-28. Last modified 2026-06-17.