CVE-2024-8783 – OpenTibiaBR MyAAC Post Reply new_post.php cross site scripting

https://notcve.org/view.php?id=CVE-2024-8783

A vulnerability classified as problematic has been found in OpenTibiaBR MyAAC up to 0.8.16. Affected is an unknown function of the file system/pages/forum/new_post.php of the component Post Reply Handler. The manipulation of the argument post_topic leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/opentibiabr/myaac/issues/121 https://github.com/opentibiabr/myaac/pull/122 https://github.com/opentibiabr/myaac/pull/122/commits/bf6ae3df0d32fa22552bb44ca4f8489a6e78cc1c https://vuldb.com/?ctiid.277434 https://vuldb.com/?id.277434 https://vuldb.com/?submit.406368 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •