CVE-2021-41921

Impact

novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/201206030/novel-plus/issues/62
• https://github.com/201206030/novel-plus/issues/62