CVE-2022-24568: Xxyopen Novel-Plus

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user-supplied crafted input.

Affected products

• Xxyopen Novel-Plus: version 3.6.0 only

Published 2022-02-10. Last modified 2026-06-17.