CVE-2022-34834
An issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS payload in an Add Comment action to the Activity log.
- Score
- CVSS 3.1 4.8 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2023-10-27
- Last modified
- 2024-09-12
- Weaknesses
- CWE-79
Affected products
References
- https://crashpark.weebly.com/blog/2-stored-xss-in-agilereporter-213-by-vermeg
- https://www.vermeg.com/agile-reporter/
