CVE-2022-34834

Description

An issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS payload in an Add Comment action to the Activity log.

Affected Platforms

Weakness Type

CWE-79

References

• https://crashpark.weebly.com/blog/2-stored-xss-in-agilereporter-213-by-vermeg
• https://www.vermeg.com/agile-reporter/
• https://crashpark.weebly.com/blog/2-stored-xss-in-agilereporter-213-by-vermeg
• https://www.vermeg.com/agile-reporter/