CVE-2026-90941 — novel-plus through 5.3.3 Missing Authorization on the Admin Book Download Endpoint
novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated backend accounts to export complete boo…
Published: 2026-09-14 · CVSS: 5.3 · CVSS 4.0
novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated backend accounts to export complete book text including paid chapters. Attackers can supply a bookId and bookName to retrieve all chapter content without VIP or purchase verification, bypassing the permission checks and data-scope limits enforced elsewhere in the admin interface.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7