novel vulnerabilities

A vulnerability was found in xxyopen/201206030 novel up to version 3.5.0 in the getBookChapter function of BookServiceImpl.java, which handles book chapter reading. Manipulating the chapterId argument results in an authorization bypass, and the attack can be launched remotely. The exploit has been publicly disclosed and may be used.

A vulnerability has been found in xxyopen/201206030 novel up to version 3.5.0 in the BookServiceImpl.getBookContentAbout function of BookServiceImpl.java, which handles book content. Manipulating the chapterId argument leads to improper authorization, and the attack can be launched remotely. The exploit has been disclosed to the public and may be used.

A DOM-based Cross-Site Scripting (XSS) vulnerability in novel V3.5.0 (201206030) allows remote attackers to execute arbitrary JavaScript code or disclose sensitive information (e.g., user session cookies) via a crafted "wvstest" parameter in the URL or malicious script injection into window.localStorage. The issue arises from insufficient validation and encoding of user-controllable data in the book comment module: unfiltered user input is stored in the backend database (book_comment table, commentContent field) and returned via API, then rendered directly into the page DOM via Vue 3's v-html directive without sanitization.