In short
- CVE-2022-34834 is a MEDIUM (CVSS 4.8) vulnerability affecting agile reporter (vermeg).
- Chance of exploitation in the next 30 days (EPSS): 0.42%, higher than 36.8% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
| Package | Affected versions | Patched versions |
|---|
| agile reporter | = 21.3
| No fix yet |
Description
An issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS payload in an Add Comment action to the Activity log.
More vulnerabilities in agile reporter
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free