← Database

CVE-2022-22791

MEDIUM CVSS: 6.6 Published: 2022-01-28 Modified: 2026-06-17

Description

SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system.

Affected Platforms

Synel Eharmony

Weakness Type

CWE-79

References