CVE-2025-1154

Summary

CVE-2025-1154 is a critical vulnerability that impacts xxyopen Novel up to version 3.4.1. The issue is linked to an unspecified functionality within the /api/front/search/books file. An attacker can exploit this flaw through manipulation of the sort argument, enabling SQL injection. The attack can be executed remotely, and the risk extends to other parameters. The exploit has been made public, increasing the potential for widespread exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.