Description
SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system.
Medium · 6.6
CVE-2022-22791
EUVD-2022-27934GHSA-g84v-6fgf-jw3g
SYNEL - eharmony Authenticated Blind & Stored XSS
Published Jan 28, 2022 · Updated Aug 3, 2024 · Assigned by INCD