← All advisories

Critical severity9.8NVD Advisory· Published Apr 28, 2022· Updated Jun 17, 2026

CVE-2021-41921

CVE-2021-41921

Description

novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution.

Affected products

3

novel-plus/novel-plusdescription
GitHub/novel-plusllm-create
Range: =3.6.1
Novel Plus/novel-plusllm-fuzzy
Range: =3.6.1

Patches

Vulnerability mechanics

References

1

github.com/201206030/novel-plus/issues/62nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.