CVE-2022-22791

SYNEL - eharmony Authenticated Blind & Stored XSS

Medium · published January 28, 2022

CVSS v3.1
6.6
EPSS
0%
Percentile
31.0
In the wild
Unconfirmed
What it is

SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00382 · 31.0th percentile
Published
2022-01-28T19:09Z
EPSS history
Timeline
  • 28 JAN 19:09Z
    SYNEL - eharmony Authenticated Blind & Stored XSS
    cvelistv5