# CVEs published 2023-01-29

12 CVEs were published on January 29, 2023: 0 critical, 2 high. Days are UTC.

- [CVE-2016-15022](https://cve.now/CVE-2016-15022.md): mosbth cimage check\_system.php cross site scripting (CVSS 2.0, mosbth cimage · mos/cimage)
- [CVE-2009-10003](https://cve.now/CVE-2009-10003.md): capnsquarepants wordcraft tag.php cross site scripting (CVSS 3.5, capnsquarepants wordcraft)
- [CVE-2023-0571](https://cve.now/CVE-2023-0571.md): SourceCodester Canteen Management System Add Customer createcustomer.php cross site scripting (CVSS 3.5, SourceCodester Canteen Management System)
- [CVE-2023-0570](https://cve.now/CVE-2023-0570.md): SourceCodester Online Tours & Travels Management System payment\_operation.php sql injection (CVSS 6.3, SourceCodester Online Tours & Travels Management System)
- [CVE-2021-46873](https://cve.now/CVE-2021-46873.md): WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's (CVSS 5.3)
- [CVE-2022-48285](https://cve.now/CVE-2022-48285.md): loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive. (CVSS 7.3, jszip)
- [CVE-2023-0564](https://cve.now/CVE-2023-0564.md): Weak Password Requirements in froxlor/froxlor (CVSS 5.4, froxlor/froxlor)
- [CVE-2023-0565](https://cve.now/CVE-2023-0565.md): Business Logic Errors in froxlor/froxlor (CVSS 5.5, froxlor/froxlor)
- [CVE-2023-0566](https://cve.now/CVE-2023-0566.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor (CVSS 6.2, froxlor/froxlor)
- [CVE-2023-0569](https://cve.now/CVE-2023-0569.md): Weak Password Requirements in publify/publify (CVSS 8.1, publify/publify · publify\_core)
- [CVE-2023-0572](https://cve.now/CVE-2023-0572.md): Unchecked Error Condition in froxlor/froxlor (CVSS 5.3, froxlor/froxlor)
- [CVE-2023-24065](https://cve.now/CVE-2023-24065.md): NOSH 4a5cfdb allows stored XSS via the create user page. (CVSS 5.4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-01-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.