CVE-2022-34879: Vicidial

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Reflected Cross Site Scripting (XSS) vulnerabilities in AST Agent Time Sheet interface (/vicidial/AST_agent_time_sheet.php) of VICIdial via agent, and search_archived_data parameters. This issue affects: VICIdial 2.14b0.5 versions prior to 3555.

Affected products

• Vicidial Vicidial: version 2.14b0.5 only

Published 2022-07-05. Last modified 2026-06-17.