Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2022-22791

SYNEL - eharmony Authenticated Blind & Stored XSS

Description

SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

  • n/aaffected

References