Unknown · Opentibiabr Myaac · CVE-2024-8783
Name of the Vulnerable Software and Affected Versions:
OpenTibiaBR MyAAC versions up to 0.8.16
Description:
A problematic vulnerability has been found in OpenTibiaBR MyAAC, affecting an unknown function of the file system/pages/forum/new post.php of the component Post Reply Handler. The manipulation of the `post topic` argument leads to cross-site scripting. It is possible to launch the attack remotely.
Recommendations:
For versions up to 0.8.16, apply a patch to fix this issue, specifically the patch identified as bf6ae3df0d32fa22552bb44ca4f8489a6e78cc1c. As a temporary workaround, consider restricting the use of the `post topic` argument in the new post.php file until a patch is applied.