CVE-2023-37847

CriticalCVSS 9.8

Published: 14/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

45th percentile - higher than 45% of all known CVEs

Summary

A SQL injection vulnerability was discovered in novel-plus version 3.6.2. This flaw could allow an attacker to manipulate database queries.

Risk Assessment

The risk involves potential unauthorized access, modification, or deletion of data, leading to a breach of confidentiality and integrity of the system.

Recommendation

It is recommended to immediately update novel-plus to the latest available version that fixes this vulnerability. Also, review and secure all SQL queries in the application.

Original NVD description (English source)

novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.