Vulnerabilities

TI-2022-17019 CVE-2022-36778 · GHSA-g3qr-2f35-f8xg

Synel - eHarmony Stored XSS

LOW 29

insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code.

CVSS 3.1MEDIUM 6.5 Adjacent network Low privileges No interaction EPSS 0.00463 Published 2022-09-13 No fix listed CWE-79

TI-2022-07040 CVE-2022-22791 · GHSA-g84v-6fgf-jw3g

LOW 29

SYNEL - eharmony Authenticated Blind & Stored XSS.

CVSS 3.1MEDIUM 6.6 Local Low privileges User interaction EPSS 0.00382 Published 2022-01-28 No fix listed CWE-79

TI-2022-07039 CVE-2022-22790 · GHSA-x2v2-qh6j-j5r3

LOW 35

SYNEL - eharmony Directory Traversal.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01023 Published 2022-01-28 No fix listed CWE-22