CVE-2023-7076 – slawkens MyAAC bugtracker.php cross site scripting

https://notcve.org/view.php?id=CVE-2023-7076

A vulnerability was found in slawkens MyAAC up to 0.8.13. It has been declared as problematic. This vulnerability affects unknown code of the file system/pages/bugtracker.php. The manipulation of the argument bug[2]['subject']/bug[2]['text']/report['subject'] leads to cross site scripting. The attack can be initiated remotely. • https://github.com/otsoft/myaac/commit/83a91ec540072d319dd338abff45f8d5ebf48190 https://github.com/slawkens/myaac/releases/tag/v0.8.14 https://vuldb.com/?ctiid.248848 https://vuldb.com/?id.248848 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •