CVE-2021-41921

CRITICAL CVSS: 9.8 Published: 2022-04-28 Modified: 2026-06-17

Description

novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution.

Affected Platforms

Xxyopen Novel-Plus

Weakness Type

CWE-434

References