https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-34834.htmlhttps://patchthecve.com/cve/CVE-2022-34834.htmlWed, 17 Jun 2026 04:51:00 +0000MEDIUM 4.8: An issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS payload in an Add Comment action to the Activity log.https://patchthecve.com/cve/CVE-2022-34833.htmlhttps://patchthecve.com/cve/CVE-2022-34833.htmlWed, 17 Jun 2026 04:51:00 +0000MEDIUM 5.4: An issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the Analysis component.https://patchthecve.com/cve/CVE-2022-34832.htmlhttps://patchthecve.com/cve/CVE-2022-34832.htmlWed, 17 Jun 2026 04:51:00 +0000MEDIUM 6.5: An issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the Analysis component.