CVE-2025-26182: Xxyopen Novel-Plus

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue in xxyopen novel plus v.4.4.0 and before allows a remote attacker to execute arbitrary code via the PageController.java file

Affected products

• Xxyopen Novel-Plus: up to and including 4.4.0

Published 2025-03-04. Last modified 2026-06-17.