CVE-2022-22791

5.4 mediumEPSS 0.4%

Medium (5.4) in synel eharmony. EPSS 0.4% chance of exploitation in the next 30 days.

SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-01-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

synel:eharmony

References

https://www.gov.il/en/departments/faq/cve_advisories
https://www.gov.il/en/departments/faq/cve_advisories

Check your stack JSON