# CVEs published 2022-01-23

4 CVEs were published on January 23, 2022: 0 critical, 0 high. Days are UTC.

- [CVE-2021-46024](https://cve.now/CVE-2021-46024.md): Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart\_add.php, No logi (no CVSS)
- [CVE-2021-45380](https://cve.now/CVE-2021-45380.md): AppCMS 2.0.101 has a XSS injection vulnerability in \\templates\\m\\inc\_head.php (no CVSS)
- [CVE-2022-23850](https://cve.now/CVE-2022-23850.md): xhtml\_translate\_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based buffer overflow via a crafted EPUB document. (no CVSS)
- [CVE-2021-4103](https://cve.now/CVE-2021-4103.md): Cross-site Scripting (XSS) - Stored in vanessa219/vditor (CVSS 6.8, vanessa219/vditor · vditor)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-01-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.