CVE-2022-36533

MediumCVSS 5.4

Published: 16/09/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

41.57%

99th percentile - higher than 99% of all known CVEs

Summary

Syncovery 9 for Linux version 9.47x and below contains a cross-site scripting (XSS) vulnerability. This flaw could allow an attacker to inject malicious scripts into the user interface.

Risk Assessment

The risk includes potential session hijacking, data theft, or unauthorized actions performed in the context of the victim's browser.

Recommendation

It is recommended to immediately update Syncovery to a version newer than 9.47x that includes a fix for the XSS vulnerability.

Original NVD description (English source)

Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to contain a cross-site scripting (XSS) vulnerability.