CVE-2022-22791: Synel Eharmony

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system.

Affected products

• Synel Eharmony: version 8.0.2.3 only

Published 2022-01-28. Last modified 2026-06-17.