← All advisories

Medium severity4.8NVD Advisory· Published Oct 27, 2023· Updated Jun 17, 2026

CVE-2022-34834

CVE-2022-34834

Description

An issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS payload in an Add Comment action to the Activity log.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Vermeg/Agile Reporter3 versions
cpe:2.3:a:vermeg:agile_reporter:21.3:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:vermeg:agile_reporter:21.3:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 21.3

Patches

Vulnerability mechanics

References

2

crashpark.weebly.com/blog/2-stored-xss-in-agilereporter-213-by-vermegnvdExploitThird Party Advisory
www.vermeg.com/agile-reporter/nvdProduct

News mentions

0

No linked articles in our index yet.