CVSS: 5.3EPSS: 0%CPEs: 17EXPL: 1CVE-2024-8783 – OpenTibiaBR MyAAC Post Reply new_post.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-8783
A vulnerability classified as problematic has been found in OpenTibiaBR MyAAC up to 0.8.16. Affected is an unknown function of the file system/pages/forum/new_post.php of the component Post Reply Handler. The manipulation of the argument post_topic leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/opentibiabr/myaac/issues/121 https://github.com/opentibiabr/myaac/pull/122 https://github.com/opentibiabr/myaac/pull/122/commits/bf6ae3df0d32fa22552bb44ca4f8489a6e78cc1c https://vuldb.com/?ctiid.277434 https://vuldb.com/?id.277434 https://vuldb.com/?submit.406368 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2023-7076 – slawkens MyAAC bugtracker.php cross site scripting
https://notcve.org/view.php?id=CVE-2023-7076
A vulnerability was found in slawkens MyAAC up to 0.8.13. It has been declared as problematic. This vulnerability affects unknown code of the file system/pages/bugtracker.php. The manipulation of the argument bug[2]['subject']/bug[2]['text']/report['subject'] leads to cross site scripting. The attack can be initiated remotely. • https://github.com/otsoft/myaac/commit/83a91ec540072d319dd338abff45f8d5ebf48190 https://github.com/slawkens/myaac/releases/tag/v0.8.14 https://vuldb.com/?ctiid.248848 https://vuldb.com/?id.248848 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •