medium6.6
CVE-2022-22791
SYNEL - eharmony Authenticated Blind & Stored XSS.
Impact
SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synel | Eharmony | Version 8.0.2.3 |