Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Slawkens

#43235of 53,634
6.1Total CVSS
Vulnerabilities · 1
PT-2023-32862
6.1
2023-12-22
Myaac · Myaac · CVE-2023-7076
**Name of the Vulnerable Software and Affected Versions** slawkens MyAAC versions up to 0.8.13 **Description** A vulnerability was found in the file system/pages/bugtracker.php, affecting unknown code. The manipulation of the argument `bug[2]['subject']`, `bug[2]['text']`, or `report['subject']` leads to cross-site scripting. The attack can be initiated remotely. **Recommendations** For versions up to 0.8.13, upgrade to version 0.8.14 to address this issue. As a temporary workaround, consider restricting access to the vulnerable file system/pages/bugtracker.php until the upgrade is applied.