Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SYNEL - eharmony Authenticated Blind & Stored XSS
Vulnerability Description
SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Vulnerability Type
N/A
Vulnerability Title
Synel Eharmonynew 跨站脚本漏洞
Vulnerability Description
Synel Eharmonynew是以色列Synel公司的一种考勤系统。 Synel Eharmonynew 存在跨站脚本漏洞，攻击者可以将 JS 代码注入comments字段并可能导致潜在的 cookie 窃取、HTML 标记和 JS 代码加载到系统中。
CVSS Information
N/A
Vulnerability Type
N/A