WS-2017-0141 | Mend Vulnerability Database

Vulnerability DatabaseWS-2017-0141

WS-2017-0141

Published:May 19, 2026

Updated:May 19, 2026

Affected versions of the package are vulnerable to Cross-site Scripting (XSS).

Affected Packages

server2 (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

iiki.baseapp.web (NUGET):

Affected version(s) >=1.0.0 <=1.0.1

Fix Suggestion:

Update to version no_fix

x-editable (NUGET):

Affected version(s) >=1.4.2 <1.5.3

Fix Suggestion:

Update to version 1.5.3

gcms.corelibrary (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

webproject (NUGET):

Affected version(s) >=1.0.0 <=1.5.0

Fix Suggestion:

Update to version no_fix

wysihtml5 (NUGET):

Affected version(s) >=0.3.0 <=0.3.0.4

Fix Suggestion:

Update to version no_fix

zchat (NUGET):

Affected version(s) >=1.0.0 <=1.0.1

Fix Suggestion:

Update to version no_fix

loqu8.x-editable (NUGET):

Affected version(s) >=1.5.1 <=1.5.2

Fix Suggestion:

Update to version no_fix

idavoll/translation-module (PHP):

Affected version(s) =2.0.x-dev <2.0.1

Fix Suggestion:

Update to version 2.0.1

kiyora/dashboard-generator (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

kunstmaan/translator-bundle (PHP):

Affected version(s) =dev-sf3 <3.0.1

Fix Suggestion:

Update to version 3.0.1

lednick-project/admin-bundle (PHP):

Affected version(s) =2.x-dev <2.1.0

Fix Suggestion:

Update to version 2.1.0

tuhuokeji/diandicms (PHP):

Affected version(s) =1.0.2 <1.0.3

Fix Suggestion:

Update to version 1.0.3

ddicloud/ddicms (PHP):

Affected version(s) =1.3.1

Fix Suggestion:

Update to version no_fix

laraflat/laraflat (PHP):

Affected version(s) >=dev-dev <=3.0.0

Fix Suggestion:

Update to version no_fix

maarsson/translation (PHP):

Affected version(s) =3.4.0 <3.5.0

Fix Suggestion:

Update to version 3.5.0

topazcms/core (PHP):

Affected version(s) >=dev-develop <=dev-master

Fix Suggestion:

Update to version no_fix

denisgold/translation-module (PHP):

Affected version(s) =2.0.x-dev <2.0.1

Fix Suggestion:

Update to version 2.0.1

tuhuokeji/diandicms (PHP):

Affected version(s) >=1.0.6 <1.0.8

Fix Suggestion:

Update to version 1.0.8

for023/ds (PHP):

Affected version(s) =dev-dev <dev-master

Fix Suggestion:

Update to version dev-master

diandiyun/ddicms (PHP):

Affected version(s) >=1.1.8 <1.3.1

Fix Suggestion:

Update to version 1.3.1

awcode/cloudmngr (PHP):

Affected version(s) >=dev-dev <=v0.0.2

Fix Suggestion:

Update to version no_fix

evgenbel/platform (PHP):

Affected version(s) =dev-master <test

Fix Suggestion:

Update to version test

sonata-project/admin-bundle (PHP):

Affected version(s) =dev-addRemoveTab <dev-addTypehint

Fix Suggestion:

Update to version dev-addTypehint

maarsson/translation (PHP):

Affected version(s) =2.5.2 <2.6.0

Fix Suggestion:

Update to version 2.6.0

idavoll/translation-module (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/Themes/Adminlte/bootstrap-3.4.1 <3.5.0

Fix Suggestion:

Update to version 3.5.0

diego3/myframework-skeleton (PHP):

Affected version(s) >=dev-master <=v1.0.0

Fix Suggestion:

Update to version no_fix

nonameffh/yii2-x-editable (PHP):

Affected version(s) >=dev-master <=0.1.1

Fix Suggestion:

Update to version no_fix

g2design/g2-modules (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

kunstmaan/translator-bundle (PHP):

Affected version(s) =5.1.x-dev <5.1.1

Fix Suggestion:

Update to version 5.1.1

idavoll/translation-module (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/Themes/Flatly/marked-4.0.10 <=dev-revert-337-kay899-patch-2

Fix Suggestion:

Update to version no_fix

odwini/asgardcms-translation (PHP):

Affected version(s) >=dev-master <=1.0.0

Fix Suggestion:

Update to version no_fix

tuhuokeji/diandicms (PHP):

Affected version(s) =dev-dev <dev-main

Fix Suggestion:

Update to version dev-main

armoni/platform (PHP):

Affected version(s) >=1.9.0 <=1.14.1

Fix Suggestion:

Update to version no_fix

asgardcms/platform (PHP):

Affected version(s) =1.0.x-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

eng-mmarouf/metronic (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

madephp/framework (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

kunstmaan/translator-bundle (PHP):

Affected version(s) =5.2.x-dev <5.2.1

Fix Suggestion:

Update to version 5.2.1

imagina/itranslation-module (PHP):

Affected version(s) >=1.0.0 <3.0.1

Fix Suggestion:

Update to version 3.0.1

kunstmaan/bundles-cms (PHP):

Affected version(s) =3.3.x-dev <3.3.1

Fix Suggestion:

Update to version 3.3.1

symfomany/laravelcinema (PHP):

Affected version(s) >=dev-analysis-qolAKz <=dev-analysis-z9mbVa

Fix Suggestion:

Update to version no_fix

vwlabs/vwtranslation-module (PHP):

Affected version(s) >=dev-master <=1.0.0

Fix Suggestion:

Update to version no_fix

coolms/twbs (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

networking/init-cms-bundle (PHP):

Affected version(s) >=v3.4.9.12 <v3.4.9.14

Fix Suggestion:

Update to version v3.4.9.14

farram/yii2-editable-widget (PHP):

Affected version(s) =dev-master <0.1.0

Fix Suggestion:

Update to version 0.1.0

fem/spof (PHP):

Affected version(s) =2.0.0 <v2.0.0

Fix Suggestion:

Update to version v2.0.0

raalveco/scaffolding (PHP):

Affected version(s) =0.1

Fix Suggestion:

Update to version no_fix

networking/init-cms-bundle (PHP):

Affected version(s) =v3.4.4.3 <v3.4.4.4

Fix Suggestion:

Update to version v3.4.4.4

sagsoz06/translation-module (PHP):

Affected version(s) >=dev-master <2.1.4

Fix Suggestion:

Update to version 2.1.4

qla/adminpanel (PHP):

Affected version(s) >=dev-master <=0.2

Fix Suggestion:

Update to version no_fix

kunstmaan/bundles-cms (PHP):

Affected version(s) =3.6.x-dev <3.6.1

Fix Suggestion:

Update to version 3.6.1

ns/color-admin-bundle (PHP):

Affected version(s) >=2.1.0 <dev-BS4

Fix Suggestion:

Update to version dev-BS4

smartysoft/yii2-smartysoft-ample (PHP):

Affected version(s) >=dev-dev <=2.4.4

Fix Suggestion:

Update to version no_fix

kotchuprik/yii2-x-editable (PHP):

Affected version(s) >=dev-master <=v1.0

Fix Suggestion:

Update to version no_fix

kunstmaan/bundles-cms (PHP):

Affected version(s) =4.2.x-dev <4.2.1

Fix Suggestion:

Update to version 4.2.1

wh/xeditable-bundle (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

idavoll/translation-module (PHP):

Affected version(s) =3.6.0 <3.6.1

Fix Suggestion:

Update to version 3.6.1

imaginacms/platform (PHP):

Affected version(s) >=dev-iblog-unit-testing <1.0.0

Fix Suggestion:

Update to version 1.0.0

2amigos/yiiwheels (PHP):

Affected version(s) =dev-1.0.7-beta <1.0.7-beta

Fix Suggestion:

Update to version 1.0.7-beta

jjsoft-ar/platform (PHP):

Affected version(s) >=1.9.0 <=2.0.x-dev

Fix Suggestion:

Update to version no_fix

hakoncms/hakoncms (PHP):

Affected version(s) =dev-dev

Fix Suggestion:

Update to version no_fix

diandiyun/ddicms (PHP):

Affected version(s) >=1.0.4 <1.1.7

Fix Suggestion:

Update to version 1.1.7

laradium/laradium (PHP):

Affected version(s) =dev-feature/belongs-to <dev-feature/belongsto-refactor

Fix Suggestion:

Update to version dev-feature/belongsto-refactor

bktz/cup (PHP):

Affected version(s) =1.0

Fix Suggestion:

Update to version no_fix

kingkernel/marrento (PHP):

Affected version(s) =v2

Fix Suggestion:

Update to version no_fix

blackspot/laravel-starter (PHP):

Affected version(s) >=v1.0.0 <2.x-dev

Fix Suggestion:

Update to version 2.x-dev

darekmeco/platform (PHP):

Affected version(s) >=1.9.0 <1.15.0

Fix Suggestion:

Update to version 1.15.0

blackspot/laravel-starter (PHP):

Affected version(s) >=v2.0.0 <v2.1.2

Fix Suggestion:

Update to version v2.1.2

sunnnnn/yii2-admin (PHP):

Affected version(s) >=1.3.0 <=1.3.3

Fix Suggestion:

Update to version no_fix

brooksyang/entrance (PHP):

Affected version(s) =dev-admin <dev-master

Fix Suggestion:

Update to version dev-master

pygon-git/plugin-core (PHP):

Affected version(s) >=0.0.16 <=0.0.17

Fix Suggestion:

Update to version no_fix

kunstmaan/translator-bundle (PHP):

Affected version(s) =3.6.x-dev <3.6.1

Fix Suggestion:

Update to version 3.6.1

luokuncool/easy-workflow (PHP):

Affected version(s) >=dev-development <=1.0

Fix Suggestion:

Update to version no_fix

wz-sistemas/cobranca (PHP):

Affected version(s) >=dev-master <=1.1.2

Fix Suggestion:

Update to version no_fix

sonata-project/admin-bundle (PHP):

Affected version(s) =dev-issue_7096 <dev-fix/7361

Fix Suggestion:

Update to version dev-fix/7361

denisgold/translation-module (PHP):

Affected version(s) =3.0.x-dev <3.0.1

Fix Suggestion:

Update to version 3.0.1

twedoo/stone (PHP):

Affected version(s) >=dev-main <=dev-3.x-dev

Fix Suggestion:

Update to version no_fix

armoni/platform (PHP):

Affected version(s) >=dev-develop <1.0.0

Fix Suggestion:

Update to version 1.0.0

evgenbel/platform (PHP):

Affected version(s) >=2.0.0 <2.0.1

Fix Suggestion:

Update to version 2.0.1

sonlabs/php-paypal (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

idavoll/translation-module (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/Themes/Flatly/debug-and-browser-sync-and-compression-and-express-and-serve-index-2.6.9 <dev-dependabot/npm_and_yarn/Themes/Adminlte/moment-2.29.2

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/Themes/Adminlte/moment-2.29.2

kunstmaan/bundles-cms (PHP):

Affected version(s) =3.2.x-dev <3.2.1

Fix Suggestion:

Update to version 3.2.1

darekmeco/platform (PHP):

Affected version(s) =1.0.x-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

aryaduta/metronic-bundle (PHP):

Affected version(s) =1.2.2

Fix Suggestion:

Update to version no_fix

kunstmaan/translator-bundle (PHP):

Affected version(s) =3.2.x-dev <3.2.1

Fix Suggestion:

Update to version 3.2.1

dbrisinajumi/x-editable-yii (PHP):

Affected version(s) >=1.1.0 <=1.3.1

Fix Suggestion:

Update to version no_fix

networking/init-cms-bundle (PHP):

Affected version(s) =v3.4.9.2 <v3.4.9.3

Fix Suggestion:

Update to version v3.4.9.3

reedboat/yiiwheels (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

fedorov-aleksey/yii2-package-theme-absolute-admin (PHP):

Affected version(s) >=dev-master <v1.0.2

Fix Suggestion:

Update to version v1.0.2

pygon-git/plugin-core (PHP):

Affected version(s) =dev-master <0.0.1

Fix Suggestion:

Update to version 0.0.1

kunstmaan/translator-bundle (PHP):

Affected version(s) =4.1.x-dev <4.1.1

Fix Suggestion:

Update to version 4.1.1

asgardcms/translation-module (PHP):

Affected version(s) =dev-master <1.1.0

Fix Suggestion:

Update to version 1.1.0

notegame/asgardcms (PHP):

Affected version(s) >=dev-develop <1.0.0

Fix Suggestion:

Update to version 1.0.0

capham/translation-module (PHP):

Affected version(s) =dev-master <1.1.0

Fix Suggestion:

Update to version 1.1.0

mauricioschmitz/homer-assets (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

2amigos/yiiwheels (PHP):

Affected version(s) =dev-1-0-8 <2.0.0

Fix Suggestion:

Update to version 2.0.0

dukeann/laradmin (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

darekmeco/platform (PHP):

Affected version(s) >=2.3.0 <=3.2.1

Fix Suggestion:

Update to version no_fix

bitsoflove-asgard/translation (PHP):

Affected version(s) =dev-master <1.1.0

Fix Suggestion:

Update to version 1.1.0

kunstmaan/translator-bundle (PHP):

Affected version(s) =3.4.x-dev <3.4.1

Fix Suggestion:

Update to version 3.4.1

i9code/laravelmetronic2 (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

techpromux/base-bundle (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

petrkoznar/x-editable (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

wafl/core-controls (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

tellaw/sunshine-admin-bundle (PHP):

Affected version(s) =v0.9.22 <v0.9.23

Fix Suggestion:

Update to version v0.9.23

syscontrollers/admin (PHP):

Affected version(s) =dev-master <v0.0.4

Fix Suggestion:

Update to version v0.0.4

asgardcms/translation-module (PHP):

Affected version(s) >=1.2.0 <=2.0.x-dev

Fix Suggestion:

Update to version no_fix

leonardowang/patient (PHP):

Affected version(s) >=dev-master <=v1.0

Fix Suggestion:

Update to version no_fix

ddicloud/ddicms (PHP):

Affected version(s) >=1.2.6 <1.2.8

Fix Suggestion:

Update to version 1.2.8

idavoll/translation-module (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/Themes/Adminlte/jquery-3.5.0 <3.5.1

Fix Suggestion:

Update to version 3.5.1

zxf/xfadmin (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

alternatex/store (PHP):

Affected version(s) >=dev-develop <=1.0.11

Fix Suggestion:

Update to version no_fix

crisu83/yiistrap-widgets (PHP):

Affected version(s) >=dev-develop <1.0.0

Fix Suggestion:

Update to version 1.0.0

sonata-project/admin-bundle (PHP):

Affected version(s) =2.x-dev <dev-VincentLanglet-patch-2

Fix Suggestion:

Update to version dev-VincentLanglet-patch-2

arionum/pool (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

tuananh-web/asset-management (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

fem/spof (PHP):

Affected version(s) =1.0.0 <v1.0.0

Fix Suggestion:

Update to version v1.0.0

abbassi/infographics (PHP):

Affected version(s) =dev-integration <dev-master

Fix Suggestion:

Update to version dev-master

kunstmaan/bundles-cms (PHP):

Affected version(s) =3.4.x-dev <3.4.1

Fix Suggestion:

Update to version 3.4.1

lednick-project/admin-bundle (PHP):

Affected version(s) =dev-master <2.0.0

Fix Suggestion:

Update to version 2.0.0

sonata-project/admin-bundle (PHP):

Affected version(s) =dev-flintci-61042 <dev-flintci-64458

Fix Suggestion:

Update to version dev-flintci-64458

imagina/cms-platform (PHP):

Affected version(s) >=dev-iblog-unit-testing <1.0.0

Fix Suggestion:

Update to version 1.0.0

jjsoft-ar/translation-module (PHP):

Affected version(s) =dev-master <1.1.0

Fix Suggestion:

Update to version 1.1.0

i9code/laravelmetronic (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

sentora/laravel-base-sentora (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

e282486518/yii2admin (PHP):

Affected version(s) >=dev-master <=v1.3.2

Fix Suggestion:

Update to version no_fix

asgardcms/platform (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/Themes/Adminlte/axios-0.21.1 <1.0.0

Fix Suggestion:

Update to version 1.0.0

maarsson/translation (PHP):

Affected version(s) =1.7.0 <1.8.0

Fix Suggestion:

Update to version 1.8.0

rmzamora/admin-bundle (PHP):

Affected version(s) >=dev-master <=3.x-dev

Fix Suggestion:

Update to version no_fix

ddicloud/ddicms (PHP):

Affected version(s) >=1.2.3 <1.2.5

Fix Suggestion:

Update to version 1.2.5

sonata-project/admin-bundle (PHP):

Affected version(s) >=3.107.2 <4.0.0-alpha-2

Fix Suggestion:

Update to version 4.0.0-alpha-2

darekmeco/platform (PHP):

Affected version(s) >=2.0.0 <2.0.1

Fix Suggestion:

Update to version 2.0.1

hustshenl/yii2-metronic (PHP):

Affected version(s) >=dev-master <=0.1.5

Fix Suggestion:

Update to version no_fix

tellaw/sunshine-admin-bundle (PHP):

Affected version(s) >=v0.9.0 <v0.9.10

Fix Suggestion:

Update to version v0.9.10

idavoll/translation-module (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/Themes/Adminlte/datatables.net-1.10.22 <test

Fix Suggestion:

Update to version test

khaled3afan/linkati (PHP):

Affected version(s) >=dev-master <=v1.0

Fix Suggestion:

Update to version no_fix

sonata-project/admin-bundle (PHP):

Affected version(s) >=dev-flintci-50477 <dev-flintci-50541

Fix Suggestion:

Update to version dev-flintci-50541

sagsoz06/adminlte-theme (PHP):

Affected version(s) >=dev-master <=2.1.9

Fix Suggestion:

Update to version no_fix

maarsson/translation (PHP):

Affected version(s) =2.0.x-dev <2.0.1

Fix Suggestion:

Update to version 2.0.1

lednick-project/admin-bundle (PHP):

Affected version(s) =3.x-dev <3.1.0

Fix Suggestion:

Update to version 3.1.0

sonata-project/admin-bundle (PHP):

Affected version(s) >=3.0.0 <dev-3.x-dev-kit

Fix Suggestion:

Update to version dev-3.x-dev-kit

2amigos/yii2-editable-widget (PHP):

Affected version(s) >=dev-master <=1.1.1

Fix Suggestion:

Update to version no_fix

tuhuokeji/diandicms (PHP):

Affected version(s) >=dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

denisgold/translation-module (PHP):

Affected version(s) =dev-revert-337-kay899-patch-2

Fix Suggestion:

Update to version no_fix

idavoll/translation-module (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/Themes/Flatly/prismjs-1.21.0 <2.0.0

Fix Suggestion:

Update to version 2.0.0

ddicloud/ddicms (PHP):

Affected version(s) =1.2.1 <1.2.2

Fix Suggestion:

Update to version 1.2.2

sonata-project/admin-bundle (PHP):

Affected version(s) =3.107.1 <dev-release/3.107.1

Fix Suggestion:

Update to version dev-release/3.107.1

m-comscience/yii2-homer-asset (PHP):

Affected version(s) >=dev-master <=v1.0.0

Fix Suggestion:

Update to version no_fix

ddicloud/ddicms (PHP):

Affected version(s) =1.0.7 <1.0.8

Fix Suggestion:

Update to version 1.0.8

kunstmaan/bundles-cms (PHP):

Affected version(s) =4.1.x-dev <4.1.1

Fix Suggestion:

Update to version 4.1.1

networking/init-cms-bundle (PHP):

Affected version(s) >=v3.4.9.6 <v3.4.9.8

Fix Suggestion:

Update to version v3.4.9.8

kunstmaan/translator-bundle (PHP):

Affected version(s) =3.5.x-dev <3.5.1

Fix Suggestion:

Update to version 3.5.1

kunstmaan/bundles-cms (PHP):

Affected version(s) =4.0.x-dev <dev-analysis-m4agPW

Fix Suggestion:

Update to version dev-analysis-m4agPW

woldy/cms (PHP):

Affected version(s) >=dev-master <=1.0.4

Fix Suggestion:

Update to version no_fix

brix/admin-bundle (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

networking/init-cms-bundle (PHP):

Affected version(s) =v3.4.1.8 <v3.4.1.9

Fix Suggestion:

Update to version v3.4.1.9

procoders/admin (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

ns/color-admin-bundle (PHP):

Affected version(s) =dev-SF5

Fix Suggestion:

Update to version no_fix

strausmann/x-editable (PHP):

Affected version(s) >=dev-dev <1.0.0

Fix Suggestion:

Update to version 1.0.0

asgardcms/platform (PHP):

Affected version(s) >=2.0.0 <2.0.1

Fix Suggestion:

Update to version 2.0.1

ns/color-admin-bundle (PHP):

Affected version(s) =dev-master <0.1.0

Fix Suggestion:

Update to version 0.1.0

kunstmaan/bundles-cms (PHP):

Affected version(s) =dev-sf3 <3.0.1

Fix Suggestion:

Update to version 3.0.1

networking/init-cms-bundle (PHP):

Affected version(s) =v3.4.1.4 <v3.4.1.5

Fix Suggestion:

Update to version v3.4.1.5

sonata-project/admin-bundle (PHP):

Affected version(s) >=dev-flintci-57976 <dev-flintci-58639

Fix Suggestion:

Update to version dev-flintci-58639

sonata-project/admin-bundle (PHP):

Affected version(s) >=3.106.0 <dev-release/3.107

Fix Suggestion:

Update to version dev-release/3.107

socialog/admin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

maioradv/admin2-cdn (PHP):

Affected version(s) >=dev-main <=v1.0.3

Fix Suggestion:

Update to version no_fix

pine207/pine-dashboard (PHP):

Affected version(s) >=dev-main <=9.x-dev

Fix Suggestion:

Update to version no_fix

i9code/metronic (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/resources/assets/global/plugins/jquery.appendGrid/acorn-6.4.1 <=dev-master

Fix Suggestion:

Update to version no_fix

fedorov-aleksey/yii2-package-theme-absolute-admin (PHP):

Affected version(s) >=v1.0.3 <=v1.1.2

Fix Suggestion:

Update to version no_fix

kunstmaan/translator-bundle (PHP):

Affected version(s) =3.3.x-dev <3.3.1

Fix Suggestion:

Update to version 3.3.1

waigeo/jsloggerbundle (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

diginova/yii2-metronic (PHP):

Affected version(s) =dev-master <0.1RC

Fix Suggestion:

Update to version 0.1RC

asgardcms/platform (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/Themes/Flatly/prismjs-1.23.0 <2.0.0

Fix Suggestion:

Update to version 2.0.0

diginova/yii2-metronic (PHP):

Affected version(s) >=0.2 <=0.9.4.2

Fix Suggestion:

Update to version no_fix

evgenbel/platform (PHP):

Affected version(s) =1.0.x-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

appcia/webwork (PHP):

Affected version(s) =dev-skeleton <0.8

Fix Suggestion:

Update to version 0.8

kunstmaan/bundles-cms (PHP):

Affected version(s) =5.1.x-dev <5.1.1

Fix Suggestion:

Update to version 5.1.1

msbios/cpanel (PHP):

Affected version(s) >=v0.0.1 <v1.0.20

Fix Suggestion:

Update to version v1.0.20

blackspot/laravel-starter (PHP):

Affected version(s) >=v2.1.4 <v2.1.6

Fix Suggestion:

Update to version v2.1.6

dbrisinajumi/x-editable-yii (PHP):

Affected version(s) >=dev-dev <1.0.0

Fix Suggestion:

Update to version 1.0.0

jackcnn/eacoophp (PHP):

Affected version(s) >=dev-dev <=v1.2.2

Fix Suggestion:

Update to version no_fix

networking/init-cms-bundle (PHP):

Affected version(s) =v3.4.1.2 <v3.4.1.3

Fix Suggestion:

Update to version v3.4.1.3

doitonlinemedia/admin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

jimmlog/modern (PHP):

Affected version(s) >=dev-master <v1.9.0

Fix Suggestion:

Update to version v1.9.0

sonata-project/admin-bundle (PHP):

Affected version(s) =dev-phpstanTests <dev-proxyGeneric

Fix Suggestion:

Update to version dev-proxyGeneric

tellaw/sunshine-admin-bundle (PHP):

Affected version(s) >=v0.9.11 <v0.9.21

Fix Suggestion:

Update to version v0.9.21

tuhuokeji/diandicms (PHP):

Affected version(s) >=1.1.4 <=1.3.1

Fix Suggestion:

Update to version no_fix

networking/init-cms-bundle (PHP):

Affected version(s) =v3.4.9.9 <v3.4.9.10

Fix Suggestion:

Update to version v3.4.9.10

asgardcms/platform (PHP):

Affected version(s) >=1.9.0 <1.15.0

Fix Suggestion:

Update to version 1.15.0

wayfirer/ddicms (PHP):

Affected version(s) >=dev-dev <=1.3.1

Fix Suggestion:

Update to version no_fix

vitalets/x-editable (PHP):

Affected version(s) >=dev-dev <1.0.0

Fix Suggestion:

Update to version 1.0.0

igeekspace/twothink (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

kunstmaan/bundles-cms (PHP):

Affected version(s) =3.5.x-dev <3.5.1

Fix Suggestion:

Update to version 3.5.1

kunstmaan/translator-bundle (PHP):

Affected version(s) =5.0.x-dev <5.0.1

Fix Suggestion:

Update to version 5.0.1

marciocamello/yii2-x-editable (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

diego3/myframework-core (PHP):

Affected version(s) =v1.0-alpha

Fix Suggestion:

Update to version no_fix

fpmsdis/sdisauth (PHP):

Affected version(s) >=dev-main <=1.0.0

Fix Suggestion:

Update to version no_fix

imagina/translation-module (PHP):

Affected version(s) >=dev-dev-tenant <1.1.0

Fix Suggestion:

Update to version 1.1.0

zikwall/simple-mvc (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

ristorantino/plugins (PHP):

Affected version(s) =dev-adicion-ko-jq-update <dev-master

Fix Suggestion:

Update to version dev-master

networking/init-cms-bundle (PHP):

Affected version(s) >=v3.4.7 <v3.4.8

Fix Suggestion:

Update to version v3.4.8

cigarrita-worker/cigarrita-api (PHP):

Affected version(s) >=dev-demo <=v1.4.x-dev

Fix Suggestion:

Update to version no_fix

vitalets/x-editable-yii (PHP):

Affected version(s) >=dev-develop <1.0.0

Fix Suggestion:

Update to version 1.0.0

msbios/dashboard (PHP):

Affected version(s) >=dev-master <=v1.0.2

Fix Suggestion:

Update to version no_fix

perminder-klair/yii2-x-editable (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

kmaking/admin-template (PHP):

Affected version(s) =v1.0.5

Fix Suggestion:

Update to version no_fix

shurupov/qengine (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

tecnodesignc/translation-module (PHP):

Affected version(s) >=2.1.0 <=3.0.0

Fix Suggestion:

Update to version no_fix

bardis/cms-symfony2 (PHP):

Affected version(s) >=v1.1.0 <2.8.8

Fix Suggestion:

Update to version 2.8.8

jjsoft-ar/translation-module (PHP):

Affected version(s) >=1.2.0 <=2.0.x-dev

Fix Suggestion:

Update to version no_fix

maarsson/translation (PHP):

Affected version(s) >=1.3.0 <1.4.1

Fix Suggestion:

Update to version 1.4.1

tonetlds/alfredapp (PHP):

Affected version(s) >=dev-master <=1.0.0

Fix Suggestion:

Update to version no_fix

waigeo/jsloggerbundle (PHP):

Affected version(s) =v1.0.0.x-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

fadriqueclickennet/translation-module (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

sonata-project/admin-bundle (PHP):

Affected version(s) >=3.1.0 <dev-release/3.105.2

Fix Suggestion:

Update to version dev-release/3.105.2

networking/init-cms-bundle (PHP):

Affected version(s) =v4.4.11 <v4.4.12

Fix Suggestion:

Update to version v4.4.12

jimmlog/metradmin (PHP):

Affected version(s) >=dev-master <3.6.2.5

Fix Suggestion:

Update to version 3.6.2.5

sonata-project/admin-bundle (PHP):

Affected version(s) =3.105.3 <dev-release/3.105.3

Fix Suggestion:

Update to version dev-release/3.105.3

i9code/laravelmetronic3 (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

vitalets/x-editable-yii (PHP):

Affected version(s) >=1.1.0 <=1.3.2

Fix Suggestion:

Update to version no_fix

kmaking/admin-template (PHP):

Affected version(s) >=dev-dependabot/bundler/src/public/plugins/bootstrap-wysihtml5-master/rake-12.3.3 <v1.0.1

Fix Suggestion:

Update to version v1.0.1

ddicloud/ddicms (PHP):

Affected version(s) >=1.0.9 <1.1.9

Fix Suggestion:

Update to version 1.1.9

kunstmaan/translator-bundle (PHP):

Affected version(s) =4.2.x-dev <4.2.1

Fix Suggestion:

Update to version 4.2.1

kunstmaan/bundles-cms (PHP):

Affected version(s) =5.0.x-dev <5.0.1

Fix Suggestion:

Update to version 5.0.1

sonata-project/admin-bundle (PHP):

Affected version(s) =dev-master <dev-master-dev-kit

Fix Suggestion:

Update to version dev-master-dev-kit

yinhe/yincart (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

ddicloud/ddicms (PHP):

Affected version(s) =1.2.9 <1.3.0

Fix Suggestion:

Update to version 1.3.0

networking/init-cms-bundle (PHP):

Affected version(s) >=v4.4.19 <dev-feature/symfony5

Fix Suggestion:

Update to version dev-feature/symfony5

kunstmaan/translator-bundle (PHP):

Affected version(s) =4.0.x-dev <4.0.1

Fix Suggestion:

Update to version 4.0.1

strausmann/x-editable (PHP):

Affected version(s) =1.5.3

Fix Suggestion:

Update to version no_fix

kingkernel/marrento (PHP):

Affected version(s) =dev-totwo <stable

Fix Suggestion:

Update to version stable

sunnnnn/yii2-admin (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

amintado/yii2-aprico-asset (PHP):

Affected version(s) >=dev-master <=0.2.x-dev

Fix Suggestion:

Update to version no_fix

darekmeco/platform (PHP):

Affected version(s) =dev-master <test

Fix Suggestion:

Update to version test

safaricco/admfw (PHP):

Affected version(s) >=dev-master <=1.5.x-dev

Fix Suggestion:

Update to version no_fix

fem/spof (PHP):

Affected version(s) >=dev-master <v1.0.0-beta1

Fix Suggestion:

Update to version v1.0.0-beta1

kunstmaan/translator-bundle (PHP):

Affected version(s) =3.1.x-dev <3.1.1

Fix Suggestion:

Update to version 3.1.1

sonata-project/admin-bundle (PHP):

Affected version(s) =dev-3.x-update-documentation <dev-VincentLanglet-patch-3

Fix Suggestion:

Update to version dev-VincentLanglet-patch-3

sonata-project/admin-bundle (PHP):

Affected version(s) >=2.3.0 <dev-dependabot/npm_and_yarn/moment-2.29.2

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/moment-2.29.2

networking/init-cms-bundle (PHP):

Affected version(s) >=v3.4.9.15 <v4.4.9

Fix Suggestion:

Update to version v4.4.9

hexmedia/administrator-bundle (PHP):

Affected version(s) >=dev-master <=v1.0.0

Fix Suggestion:

Update to version no_fix

ddicloud/ddicms (PHP):

Affected version(s) >=dev-dev <1.0.6

Fix Suggestion:

Update to version 1.0.6

fastd/asset-bundle (PHP):

Affected version(s) >=dev-dev <=v1.0.1

Fix Suggestion:

Update to version no_fix

jjsoft-ar/platform (PHP):

Affected version(s) >=dev-develop <1.0.0

Fix Suggestion:

Update to version 1.0.0

maarsson/translation (PHP):

Affected version(s) =1.9.1 <1.10.0

Fix Suggestion:

Update to version 1.10.0

networking/init-cms-bundle (PHP):

Affected version(s) >=v3.4.0.4 <v3.4.1.1

Fix Suggestion:

Update to version v3.4.1.1

denisgold/translation-module (PHP):

Affected version(s) =dev-master <test

Fix Suggestion:

Update to version test

crisu83/yiistrap-widgets (PHP):

Affected version(s) =1.7.0

Fix Suggestion:

Update to version no_fix

kmaking/admin-template (PHP):

Affected version(s) =v1.0.2 <v1.0.4

Fix Suggestion:

Update to version v1.0.4

asgardcms/platform (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/Themes/Adminlte/datatables.net-1.10.22 <test

Fix Suggestion:

Update to version test

guoyu/yii2admin (PHP):

Affected version(s) >=dev-master <=v1.3.1

Fix Suggestion:

Update to version no_fix

kunstmaan/bundles-cms (PHP):

Affected version(s) =3.1.x-dev <3.1.1

Fix Suggestion:

Update to version 3.1.1

skeeks/yii2-template-smarty (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

diandiyun/ddicms (PHP):

Affected version(s) >=dev-dev <1.0.3

Fix Suggestion:

Update to version 1.0.3

networking/init-cms-bundle (PHP):

Affected version(s) >=v3.4.2 <v3.4.4.2

Fix Suggestion:

Update to version v3.4.4.2

techpromux/base-bundle (PHP):

Affected version(s) >=1.0.1 <=1.0.6

Fix Suggestion:

Update to version no_fix

jimmlog/metradmin (PHP):

Affected version(s) =3.6.2.9

Fix Suggestion:

Update to version no_fix

maarsson/translation (PHP):

Affected version(s) =3.7.2 <dev-dependabot/npm_and_yarn/Themes/Flatly/marked-4.0.10

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/Themes/Flatly/marked-4.0.10

Related Resources (1)

https://github.com/Voog/wysihtml/commit/34ebe36a3d6b070883f9315fa3097f7598ed11e9

Do you need more information?

CVSS v4

Base Score:

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

PASSIVE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

NONE

Vulnerable System Availability

NONE

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

AI app security

Mend AI

Application security

Mend AppSec

Dependency management

Mend Renovate

Expand coverage

Runtime and beyond

AI security

Code security

Supply chain security

Compliance & reporting

vs. AI security tools

vs. AppSec tools

Buyer’s guides

About Mend.io

Partners & people

Customers

Learn & explore

Guides

Developers hub