# CVEs published 2024-01-14

4 CVEs were published on January 14, 2024: 0 critical, 0 high. Days are UTC.

- [CVE-2024-0525](https://cve.now/CVE-2024-0525.md): CXBSoft Url-shorting HTTP POST Request long\_s\_short.php sql injection (CVSS 5.5, CXBSoft Url-shorting)
- [CVE-2024-0524](https://cve.now/CVE-2024-0524.md): CXBSoft Url-shorting index.php sql injection (CVSS 5.5, CXBSoft Url-shorting)
- [CVE-2024-0523](https://cve.now/CVE-2024-0523.md): CmsEasy language\_admin.php getslide\_child\_action sql injection (CVSS 6.3, CmsEasy)
- [CVE-2024-0522](https://cve.now/CVE-2024-0522.md): Allegro RomPager HTTP POST Request cross-site request forgery (CVSS 4.3, Allegro RomPager)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-01-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.