CVE-2024-33383: Xxyopen Novel-Plus

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET request using the filePath parameter.

Affected products

• Xxyopen Novel-Plus: up to and including 4.3.0

Published 2024-04-30. Last modified 2026-06-17.