CVEs published January 23, 2022
4 CVEs were published on January 23, 2022: 0 critical, 0 high.
- Published
- 4
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 3
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- vanessa219/vditor · vditor
- 1
Medium, low and unrated 4
- CVE-2021-46024Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart_add.php, No logi
- CVE-2021-45380AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php
- CVE-2022-23850xhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based buffer overflow via a crafted EPUB document.
- CVE-2021-4103Cross-site Scripting (XSS) - Stored in vanessa219/vditorvanessa219/vditor · vditor