CVE-2021-31711
Published:May 09, 2023
Updated:November 04, 2026
Cross Site Scripting vulnerability found in Trippo ResponsiveFilemanager v.9.14.0 and before allows a remote attacker to execute arbitrary code via the sort_by parameter in the dialog.php file.
Affected Packages
ronappleton/radmin-tinymce (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixvamcart/vamcart (PHP):
Affected version(s) >=2.37 <2.56.1Fix Suggestion:
Update to version 2.56.1lekoala/silverstripe-form-extras (PHP):
Affected version(s) =dev-master <1.0.0Fix Suggestion:
Update to version 1.0.0melisplatform/melis-core (PHP):
Affected version(s) >=v4.0.10 <v4.0.15Fix Suggestion:
Update to version v4.0.15melisplatform/melis-core (PHP):
Affected version(s) =dev-update/fancytree-v2.37.0 <v3.0.0Fix Suggestion:
Update to version v3.0.0ahyadessam/laravel-adminlte (PHP):
Affected version(s) >=1.0.5 <1.1.4Fix Suggestion:
Update to version 1.1.4fznoviar/responsivefilemanager (PHP):
Affected version(s) >=dev-master <9.9.4Fix Suggestion:
Update to version 9.9.4melisplatform/melis-core (PHP):
Affected version(s) =v4.0.17 <v4.0.18Fix Suggestion:
Update to version v4.0.18lekoala/silverstripe-form-extras (PHP):
Affected version(s) >=1.2.2 <1.2.13Fix Suggestion:
Update to version 1.2.13laravelcity/laravel-filemanager (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixmelisplatform/melis-core (PHP):
Affected version(s) >=dev-fix/multi-val-input-label <dev-fix/reset-password-linkFix Suggestion:
Update to version dev-fix/reset-password-linkthelia/thelia (PHP):
Affected version(s) >=2.4.0 <2.5.0-alpha1Fix Suggestion:
Update to version 2.5.0-alpha1melisplatform/melis-core (PHP):
Affected version(s) >=v3.1.0 <v3.1.2Fix Suggestion:
Update to version v3.1.2crabstudio/app (PHP):
Affected version(s) >=3.2.6 <dev-revert-244-jsonview-serializationFix Suggestion:
Update to version dev-revert-244-jsonview-serializationmelisplatform/melis-core (PHP):
Affected version(s) >=dev-fix/bubble-plugins <dev-fix/gdpr-email-conf-smtpFix Suggestion:
Update to version dev-fix/gdpr-email-conf-smtpfed/mce (PHP):
Affected version(s) >=0.0.1 <=0.0.2Fix Suggestion:
Update to version no_fixtherealworld/rte-module (PHP):
Affected version(s) >=v1.5.1 <v1.7.0Fix Suggestion:
Update to version v1.7.0vamcart/vamcart (PHP):
Affected version(s) >=2.4.41 <2.31Fix Suggestion:
Update to version 2.31thelia/tinymce-module (PHP):
Affected version(s) =2.4.0 <2.4.0-apha1Fix Suggestion:
Update to version 2.4.0-apha1seguce92/filemanager (PHP):
Affected version(s) >=dev-master <v1.3.6Fix Suggestion:
Update to version v1.3.6dimaninc/di_core (PHP):
Affected version(s) >=dev-composer <0.2.0Fix Suggestion:
Update to version 0.2.0despark/html-template-curator (PHP):
Affected version(s) =v3.0Fix Suggestion:
Update to version no_fixthelia/tinymce-module (PHP):
Affected version(s) =dev-master <1.0Fix Suggestion:
Update to version 1.0crabstudio/app (PHP):
Affected version(s) =dev-master <dev-master-license-removalFix Suggestion:
Update to version dev-master-license-removalvamcart/vamcart (PHP):
Affected version(s) =v2.4.4 <2.4.5Fix Suggestion:
Update to version 2.4.5melisplatform/melis-core (PHP):
Affected version(s) =dev-fix/api <dev-fix/bo-lang-icon-columnFix Suggestion:
Update to version dev-fix/bo-lang-icon-columnzafranf/zetthcore (PHP):
Affected version(s) >=v0.0.0 <v0.1.0Fix Suggestion:
Update to version v0.1.0thelia/tinymce-module (PHP):
Affected version(s) >=2.4.x-dev <2.5.0-alpha1Fix Suggestion:
Update to version 2.5.0-alpha1melisplatform/melis-core (PHP):
Affected version(s) >=v3.2.1 <v4.0.8Fix Suggestion:
Update to version v4.0.8amirkoklan/responsivefilemanager (PHP):
Affected version(s) >=v9.10.2 <=v9.12.1Fix Suggestion:
Update to version no_fixmelisplatform/melis-core (PHP):
Affected version(s) >=v3.1.5 <v3.2.0Fix Suggestion:
Update to version v3.2.0melisplatform/melis-core (PHP):
Affected version(s) =v4.1.0 <v4.1.1Fix Suggestion:
Update to version v4.1.1zafranf/zetthcore (PHP):
Affected version(s) >=v1.0.0 <dev-L6Fix Suggestion:
Update to version dev-L6rokorolov/parus-basic-app (PHP):
Affected version(s) >=dev-master <=dev-release/1.1Fix Suggestion:
Update to version no_fixbrucecms/pages (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixdeimon/sandbox-project (PHP):
Affected version(s) =dev-master <1.0.2Fix Suggestion:
Update to version 1.0.2therealworld/rte-module (PHP):
Affected version(s) =v5.1.10 <dev-oxid61Fix Suggestion:
Update to version dev-oxid61sovanet/eshop (PHP):
Affected version(s) =v1.0.0Fix Suggestion:
Update to version no_fixmelisplatform/melis-core (PHP):
Affected version(s) >=dev-fix/reset-pwd <dev-update/change-composer-versionFix Suggestion:
Update to version dev-update/change-composer-versionamirkoklan/responsivefilemanager (PHP):
Affected version(s) >=v9.9.4 <v9.10.1Fix Suggestion:
Update to version v9.10.1fznoviar/responsivefilemanager (PHP):
Affected version(s) >=v9.9.4 <v9.10.1Fix Suggestion:
Update to version v9.10.1zafranf/zetthcore (PHP):
Affected version(s) >=dev-v0.1.3.4-mur <v0.1.9Fix Suggestion:
Update to version v0.1.9fznoviar/responsivefilemanager (PHP):
Affected version(s) =v9.10.1.1Fix Suggestion:
Update to version no_fixshurupov/qengine (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fiximagecms/imagecms (PHP):
Affected version(s) =v4.8.1 <v4.9Fix Suggestion:
Update to version v4.9melisplatform/melis-core (PHP):
Affected version(s) >=dev-fix/2805 <=dev-fix/6658Fix Suggestion:
Update to version no_fixdimaninc/di_core (PHP):
Affected version(s) >=0.3.0 <=0.3.1Fix Suggestion:
Update to version no_fixdespark/html-template-curator (PHP):
Affected version(s) =dev-master <v.1.0Fix Suggestion:
Update to version v.1.0imagecms/imagecms (PHP):
Affected version(s) =dev-phpunit <v1.0.5Fix Suggestion:
Update to version v1.0.5amirkoklan/responsivefilemanager (PHP):
Affected version(s) >=dev-master <9.9.4Fix Suggestion:
Update to version 9.9.4thelia/thelia (PHP):
Affected version(s) =dev-master <dev-modern-boFix Suggestion:
Update to version dev-modern-bopanix/wgt-tinymce (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixmelisplatform/melis-core (PHP):
Affected version(s) =dev-update/tinymce6.7.0 <dev-php-7.0Fix Suggestion:
Update to version dev-php-7.0Related Resources (1)
Do you need more information?
Contact UsCVSS v4
Base Score:
5.1
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
PASSIVE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
LOW
Vulnerable System Availability
NONE
Subsequent System Confidentiality
LOW
Subsequent System Integrity
LOW
Subsequent System Availability
NONE
CVSS v3
Base Score:
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Weakness Type (CWE)
Improper Neutralization of Input During Web Page Generation
EPSS
Base Score:
0.49