CVE-2023-7076

A vulnerability was found in slawkens MyAAC up to 0.8.13. It has been declared as problematic. This vulnerability affects unknown code of the file system/pages/bugtracker.php. The manipulation of the argument bug[2]['subject']/bug[2]['text']/report['subject'] leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.8.14 is able to address this issue. The name of the patch is 83a91ec540072d319dd338abff45f8d5ebf48190. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-248848.

• CWE-79

• https://github.com/otsoft/myaac/commit/83a91ec540072d319dd338abff45f8d5ebf48190Patch
• https://github.com/slawkens/myaac/releases/tag/v0.8.14Release Notes
• https://vuldb.com/?ctiid.248848Third Party Advisory
• https://vuldb.com/?id.248848Third Party Advisory
• https://github.com/otsoft/myaac/commit/83a91ec540072d319dd338abff45f8d5ebf48190Patch
• https://github.com/slawkens/myaac/releases/tag/v0.8.14Release Notes
• https://vuldb.com/?ctiid.248848Third Party Advisory
• https://vuldb.com/?id.248848Third Party Advisory

Published

Dec 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-7070The Email Encoder – Protect Email Addresses and Phone Number…5.4
• CVE-2023-7071The Essential Blocks – Page Builder Gutenberg Blocks, Patter…5.4
• CVE-2023-7072The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPr…7.5
• CVE-2023-7073The Auto Featured Image (Auto Post Thumbnail) plugin for Wor…6.4
• CVE-2023-7074The WP SOCIAL BOOKMARK MENU WordPress plugin through 1.2 doe…8.8
• CVE-2023-7075A vulnerability was found in code-projects Point of Sales an…6.1
• CVE-2023-7077Sharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X4…9.8
• CVE-2023-7078Sending specially crafted HTTP requests to Miniflare's serve…8.1
• CVE-2023-7079Sending specially crafted HTTP requests and inspector messag…5.7
• CVE-2023-7080The V8 inspector intentionally allows arbitrary code executi…8
• CVE-2023-7081Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-7082The Import any XML or CSV File to WordPress plugin before 3.…7.2