CVE-2022-34879

Reflected Cross Site Scripting (XSS) vulnerabilities in AST Agent Time Sheet interface (/vicidial/AST_agent_time_sheet.php) of VICIdial via agent, and search_archived_data parameters. This issue affects: VICIdial 2.14b0.5 versions prior to 3555.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@rapid7.com

Published

2022-07-05

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Vicidial (Vicidial)

References

• https://www.vicidial.org/VICIDIALforum/viewtopic.php?f=4&t=41300&sid=aacb27a29fefd85265b4d55fe51122af