CVE-2022-34834: Vermeg Agile Reporter

Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS payload in an Add Comment action to the Activity log.

Affected products

• Vermeg Agile Reporter: version 21.3 only

Published 2023-10-27. Last modified 2026-06-17.