{"id":"CVE-2021-31711","details":"Cross Site Scripting vulnerability found in Trippo ResponsiveFilemanager v.9.14.0 and before allows a remote attacker to execute arbitrary code via the sort_by parameter in the dialog.php file.","modified":"2026-10-20T10:54:40.325775702Z","published":"2023-05-09T16:15:14.197Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:responsivefilemanager:responsivefilemanager:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"last_affected":"9.4.10"}],"source":"CPE_RANGE"}],"vendor_product":"responsivefilemanager:responsivefilemanager"}]},"references":[{"type":"FIX","url":"https://github.com/trippo/ResponsiveFilemanager/issues/661"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/trippo/responsivefilemanager","events":[{"introduced":"0"},{"last_affected":"d5572d2c645c9eebf0a9fcb9f3e6d23722d454f4"}],"database_specific":{"extracted_events":[{"source":"DESCRIPTION","range":[{"introduced":"0"},{"last_affected":"9.14.0"}]}]}}],"versions":["v9.14.0","v9.13.4","v9.13.3","v9.13.1","v9.13.0","v9.12.2","v9.12.1","v9.12.0","v9.11.3","v9.11.0","v9.10.2","v9.10.1","v.9.10.1","v9.10.0","v9.9.7","v9.9.6","v9.9.5","v9.9.4","9.9.4","v9.9.3","9.9.2","9.9.1","9.9"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-31711.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"}]}