# Xxyopen Novel-Plus


- [CVE-2025-45890](https://insights.sbomify.com/CVE-2025-45890/): Path traversal in n/a (critical 9.8)
- [CVE-2024-25274](https://insights.sbomify.com/CVE-2024-25274/): File upload in n/a (critical 9.8)
- [CVE-2024-24014](https://insights.sbomify.com/CVE-2024-24014/): SQL injection in n/a (critical 9.8)
- [CVE-2024-24018](https://insights.sbomify.com/CVE-2024-24018/): SQL injection in n/a (critical 9.8)
- [CVE-2024-24021](https://insights.sbomify.com/CVE-2024-24021/): SQL injection in n/a (critical 9.8)
- [CVE-2024-24023](https://insights.sbomify.com/CVE-2024-24023/): SQL injection in n/a (critical 9.8)
- [CVE-2024-24024](https://insights.sbomify.com/CVE-2024-24024/): Path traversal in n/a (critical 9.8)
- [CVE-2024-24025](https://insights.sbomify.com/CVE-2024-24025/): File upload in n/a (critical 9.8)
- [CVE-2024-24026](https://insights.sbomify.com/CVE-2024-24026/): File upload in n/a (critical 9.8)
- [CVE-2024-24019](https://insights.sbomify.com/CVE-2024-24019/): SQL injection in n/a (critical 9.8)
- [CVE-2024-24013](https://insights.sbomify.com/CVE-2024-24013/): SQL injection in n/a (critical 9.8)
- [CVE-2024-24015](https://insights.sbomify.com/CVE-2024-24015/): SQL injection in n/a (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/xxyopen/novel-plus/