CVE-2022-22791

MEDIUM 5.4CVE-2022-22791 · Published 28/01/2022 · updated 17/06/2026

In short

CVE-2022-22791 is a MEDIUM (CVSS 5.4) vulnerability affecting eharmony (synel).
Chance of exploitation in the next 30 days (EPSS): 0.38%, higher than 32.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
eharmony synel	`= 8.0.2.3`	No fix yet

Description

SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system.

References

gov.il/en/departments/faq/cve_advisories · Third Party Advisory

More vulnerabilities in eharmony

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free