WS-2017-0141 | Mend Vulnerability Database

Vulnerability DatabaseWS-2017-0141

WS-2017-0141

Published:May 19, 2026

Updated:May 19, 2026

Affected versions of the package are vulnerable to Cross-site Scripting (XSS).

Affected Packages

x-editable (NUGET):

Affected version(s) >=1.4.2 <1.5.3

Fix Suggestion:

Update to version 1.5.3

wysihtml5 (NUGET):

Affected version(s) >=0.3.0 <=0.3.0.4

Fix Suggestion:

Update to version no_fix

server2 (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

webproject (NUGET):

Affected version(s) >=1.0.0 <=1.5.0

Fix Suggestion:

Update to version no_fix

zchat (NUGET):

Affected version(s) >=1.0.0 <=1.0.1

Fix Suggestion:

Update to version no_fix

gcms.corelibrary (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

iiki.baseapp.web (NUGET):

Affected version(s) >=1.0.0 <=1.0.1

Fix Suggestion:

Update to version no_fix

loqu8.x-editable (NUGET):

Affected version(s) >=1.5.1 <=1.5.2

Fix Suggestion:

Update to version no_fix

imagina/translation-module (PHP):

Affected version(s) >=dev-dev-tenant <1.1.0

Fix Suggestion:

Update to version 1.1.0

jimmlog/metradmin (PHP):

Affected version(s) =3.6.2.9

Fix Suggestion:

Update to version no_fix

idavoll/translation-module (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/Themes/Adminlte/bootstrap-3.4.1 <3.5.0

Fix Suggestion:

Update to version 3.5.0

odwini/asgardcms-translation (PHP):

Affected version(s) >=dev-master <=1.0.0

Fix Suggestion:

Update to version no_fix

maarsson/translation (PHP):

Affected version(s) =3.4.0 <3.5.0

Fix Suggestion:

Update to version 3.5.0

twedoo/stone (PHP):

Affected version(s) >=dev-main <=dev-3.x-dev

Fix Suggestion:

Update to version no_fix

rmzamora/admin-bundle (PHP):

Affected version(s) >=dev-master <=3.x-dev

Fix Suggestion:

Update to version no_fix

kingkernel/marrento (PHP):

Affected version(s) =dev-totwo <stable

Fix Suggestion:

Update to version stable

doitonlinemedia/admin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

idavoll/translation-module (PHP):

Affected version(s) =3.6.0 <3.6.1

Fix Suggestion:

Update to version 3.6.1

armoni/platform (PHP):

Affected version(s) >=dev-develop <1.0.0

Fix Suggestion:

Update to version 1.0.0

lednick-project/admin-bundle (PHP):

Affected version(s) =dev-master <2.0.0

Fix Suggestion:

Update to version 2.0.0

sonata-project/admin-bundle (PHP):

Affected version(s) =dev-flintci-61042 <dev-flintci-64458

Fix Suggestion:

Update to version dev-flintci-64458

tuhuokeji/diandicms (PHP):

Affected version(s) =dev-dev <dev-main

Fix Suggestion:

Update to version dev-main

blackspot/laravel-starter (PHP):

Affected version(s) >=v1.0.0 <2.x-dev

Fix Suggestion:

Update to version 2.x-dev

kmaking/admin-template (PHP):

Affected version(s) =v1.0.5

Fix Suggestion:

Update to version no_fix

sonata-project/admin-bundle (PHP):

Affected version(s) =dev-master <dev-master-dev-kit

Fix Suggestion:

Update to version dev-master-dev-kit

symfomany/laravelcinema (PHP):

Affected version(s) >=dev-analysis-qolAKz <=dev-analysis-z9mbVa

Fix Suggestion:

Update to version no_fix

cigarrita-worker/cigarrita-api (PHP):

Affected version(s) >=dev-demo <=v1.4.x-dev

Fix Suggestion:

Update to version no_fix

luokuncool/easy-workflow (PHP):

Affected version(s) >=dev-development <=1.0

Fix Suggestion:

Update to version no_fix

blackspot/laravel-starter (PHP):

Affected version(s) >=v2.0.0 <v2.1.2

Fix Suggestion:

Update to version v2.1.2

diandiyun/ddicms (PHP):

Affected version(s) >=1.1.8 <1.3.1

Fix Suggestion:

Update to version 1.3.1

topazcms/core (PHP):

Affected version(s) >=dev-develop <=dev-master

Fix Suggestion:

Update to version no_fix

jackcnn/eacoophp (PHP):

Affected version(s) >=dev-dev <=v1.2.2

Fix Suggestion:

Update to version no_fix

kunstmaan/translator-bundle (PHP):

Affected version(s) =3.1.x-dev <3.1.1

Fix Suggestion:

Update to version 3.1.1

fastd/asset-bundle (PHP):

Affected version(s) >=dev-dev <=v1.0.1

Fix Suggestion:

Update to version no_fix

evgenbel/platform (PHP):

Affected version(s) =1.0.x-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

abbassi/infographics (PHP):

Affected version(s) =dev-integration <dev-master

Fix Suggestion:

Update to version dev-master

coolms/twbs (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

hakoncms/hakoncms (PHP):

Affected version(s) =dev-dev

Fix Suggestion:

Update to version no_fix

for023/ds (PHP):

Affected version(s) =dev-dev <dev-master

Fix Suggestion:

Update to version dev-master

kunstmaan/bundles-cms (PHP):

Affected version(s) =3.1.x-dev <3.1.1

Fix Suggestion:

Update to version 3.1.1

diandiyun/ddicms (PHP):

Affected version(s) >=1.0.4 <1.1.7

Fix Suggestion:

Update to version 1.1.7

zikwall/simple-mvc (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

darekmeco/platform (PHP):

Affected version(s) =1.0.x-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

hexmedia/administrator-bundle (PHP):

Affected version(s) >=dev-master <=v1.0.0

Fix Suggestion:

Update to version no_fix

denisgold/translation-module (PHP):

Affected version(s) =dev-master <test

Fix Suggestion:

Update to version test

eng-mmarouf/metronic (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

networking/init-cms-bundle (PHP):

Affected version(s) =v3.4.4.3 <v3.4.4.4

Fix Suggestion:

Update to version v3.4.4.4

sonata-project/admin-bundle (PHP):

Affected version(s) >=dev-flintci-50477 <dev-flintci-50541

Fix Suggestion:

Update to version dev-flintci-50541

kunstmaan/bundles-cms (PHP):

Affected version(s) =3.3.x-dev <3.3.1

Fix Suggestion:

Update to version 3.3.1

sonata-project/admin-bundle (PHP):

Affected version(s) =3.107.1 <dev-release/3.107.1

Fix Suggestion:

Update to version dev-release/3.107.1

aryaduta/metronic-bundle (PHP):

Affected version(s) =1.2.2

Fix Suggestion:

Update to version no_fix

networking/init-cms-bundle (PHP):

Affected version(s) >=v3.4.2 <v3.4.4.2

Fix Suggestion:

Update to version v3.4.4.2

nonameffh/yii2-x-editable (PHP):

Affected version(s) >=dev-master <=0.1.1

Fix Suggestion:

Update to version no_fix

kunstmaan/bundles-cms (PHP):

Affected version(s) =4.2.x-dev <4.2.1

Fix Suggestion:

Update to version 4.2.1

asgardcms/platform (PHP):

Affected version(s) >=1.9.0 <1.15.0

Fix Suggestion:

Update to version 1.15.0

evgenbel/platform (PHP):

Affected version(s) >=2.0.0 <2.0.1

Fix Suggestion:

Update to version 2.0.1

diginova/yii2-metronic (PHP):

Affected version(s) >=0.2 <=0.9.4.2

Fix Suggestion:

Update to version no_fix

safaricco/admfw (PHP):

Affected version(s) >=dev-master <=1.5.x-dev

Fix Suggestion:

Update to version no_fix

sonata-project/admin-bundle (PHP):

Affected version(s) =dev-phpstanTests <dev-proxyGeneric

Fix Suggestion:

Update to version dev-proxyGeneric

appcia/webwork (PHP):

Affected version(s) =dev-skeleton <0.8

Fix Suggestion:

Update to version 0.8

farram/yii2-editable-widget (PHP):

Affected version(s) =dev-master <0.1.0

Fix Suggestion:

Update to version 0.1.0

imaginacms/platform (PHP):

Affected version(s) >=dev-iblog-unit-testing <1.0.0

Fix Suggestion:

Update to version 1.0.0

dukeann/laradmin (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

kunstmaan/translator-bundle (PHP):

Affected version(s) =3.2.x-dev <3.2.1

Fix Suggestion:

Update to version 3.2.1

fpmsdis/sdisauth (PHP):

Affected version(s) >=dev-main <=1.0.0

Fix Suggestion:

Update to version no_fix

sonata-project/admin-bundle (PHP):

Affected version(s) >=dev-flintci-57976 <dev-flintci-58639

Fix Suggestion:

Update to version dev-flintci-58639

ddicloud/ddicms (PHP):

Affected version(s) >=1.0.9 <1.1.9

Fix Suggestion:

Update to version 1.1.9

leonardowang/patient (PHP):

Affected version(s) >=dev-master <=v1.0

Fix Suggestion:

Update to version no_fix

kmaking/admin-template (PHP):

Affected version(s) >=dev-dependabot/bundler/src/public/plugins/bootstrap-wysihtml5-master/rake-12.3.3 <v1.0.1

Fix Suggestion:

Update to version v1.0.1

asgardcms/platform (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/Themes/Flatly/prismjs-1.23.0 <2.0.0

Fix Suggestion:

Update to version 2.0.0

strausmann/x-editable (PHP):

Affected version(s) =1.5.3

Fix Suggestion:

Update to version no_fix

jjsoft-ar/platform (PHP):

Affected version(s) >=1.9.0 <=2.0.x-dev

Fix Suggestion:

Update to version no_fix

jjsoft-ar/translation-module (PHP):

Affected version(s) =dev-master <1.1.0

Fix Suggestion:

Update to version 1.1.0

ddicloud/ddicms (PHP):

Affected version(s) =1.3.1

Fix Suggestion:

Update to version no_fix

perminder-klair/yii2-x-editable (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

kunstmaan/translator-bundle (PHP):

Affected version(s) =5.1.x-dev <5.1.1

Fix Suggestion:

Update to version 5.1.1

networking/init-cms-bundle (PHP):

Affected version(s) >=v3.4.0.4 <v3.4.1.1

Fix Suggestion:

Update to version v3.4.1.1

woldy/cms (PHP):

Affected version(s) >=dev-master <=1.0.4

Fix Suggestion:

Update to version no_fix

wz-sistemas/cobranca (PHP):

Affected version(s) >=dev-master <=1.1.2

Fix Suggestion:

Update to version no_fix

darekmeco/platform (PHP):

Affected version(s) >=1.9.0 <1.15.0

Fix Suggestion:

Update to version 1.15.0

wh/xeditable-bundle (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

ddicloud/ddicms (PHP):

Affected version(s) >=dev-dev <1.0.6

Fix Suggestion:

Update to version 1.0.6

kunstmaan/bundles-cms (PHP):

Affected version(s) =3.6.x-dev <3.6.1

Fix Suggestion:

Update to version 3.6.1

alternatex/store (PHP):

Affected version(s) >=dev-develop <=1.0.11

Fix Suggestion:

Update to version no_fix

pygon-git/plugin-core (PHP):

Affected version(s) >=0.0.16 <=0.0.17

Fix Suggestion:

Update to version no_fix

kunstmaan/bundles-cms (PHP):

Affected version(s) =3.2.x-dev <3.2.1

Fix Suggestion:

Update to version 3.2.1

vitalets/x-editable-yii (PHP):

Affected version(s) >=dev-develop <1.0.0

Fix Suggestion:

Update to version 1.0.0

tonetlds/alfredapp (PHP):

Affected version(s) >=dev-master <=1.0.0

Fix Suggestion:

Update to version no_fix

blackspot/laravel-starter (PHP):

Affected version(s) >=v2.1.4 <v2.1.6

Fix Suggestion:

Update to version v2.1.6

sonlabs/php-paypal (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

i9code/laravelmetronic (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

asgardcms/platform (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/Themes/Adminlte/datatables.net-1.10.22 <test

Fix Suggestion:

Update to version test

2amigos/yiiwheels (PHP):

Affected version(s) =dev-1-0-8 <2.0.0

Fix Suggestion:

Update to version 2.0.0

kingkernel/marrento (PHP):

Affected version(s) =v2

Fix Suggestion:

Update to version no_fix

diandiyun/ddicms (PHP):

Affected version(s) >=dev-dev <1.0.3

Fix Suggestion:

Update to version 1.0.3

petrkoznar/x-editable (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

jjsoft-ar/platform (PHP):

Affected version(s) >=dev-develop <1.0.0

Fix Suggestion:

Update to version 1.0.0

pygon-git/plugin-core (PHP):

Affected version(s) =dev-master <0.0.1

Fix Suggestion:

Update to version 0.0.1

laradium/laradium (PHP):

Affected version(s) =dev-feature/belongs-to <dev-feature/belongsto-refactor

Fix Suggestion:

Update to version dev-feature/belongsto-refactor

idavoll/translation-module (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/Themes/Flatly/debug-and-browser-sync-and-compression-and-express-and-serve-index-2.6.9 <dev-dependabot/npm_and_yarn/Themes/Adminlte/moment-2.29.2

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/Themes/Adminlte/moment-2.29.2

maarsson/translation (PHP):

Affected version(s) >=1.3.0 <1.4.1

Fix Suggestion:

Update to version 1.4.1

brix/admin-bundle (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

networking/init-cms-bundle (PHP):

Affected version(s) >=v4.4.19 <dev-feature/symfony5

Fix Suggestion:

Update to version dev-feature/symfony5

kunstmaan/translator-bundle (PHP):

Affected version(s) =3.6.x-dev <3.6.1

Fix Suggestion:

Update to version 3.6.1

khaled3afan/linkati (PHP):

Affected version(s) >=dev-master <=v1.0

Fix Suggestion:

Update to version no_fix

ns/color-admin-bundle (PHP):

Affected version(s) =dev-master <0.1.0

Fix Suggestion:

Update to version 0.1.0

brooksyang/entrance (PHP):

Affected version(s) =dev-admin <dev-master

Fix Suggestion:

Update to version dev-master

sonata-project/admin-bundle (PHP):

Affected version(s) >=2.3.0 <dev-dependabot/npm_and_yarn/moment-2.29.2

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/moment-2.29.2

2amigos/yii2-editable-widget (PHP):

Affected version(s) >=dev-master <=1.1.1

Fix Suggestion:

Update to version no_fix

shurupov/qengine (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

networking/init-cms-bundle (PHP):

Affected version(s) =v4.4.11 <v4.4.12

Fix Suggestion:

Update to version v4.4.12

maarsson/translation (PHP):

Affected version(s) =2.5.2 <2.6.0

Fix Suggestion:

Update to version 2.6.0

networking/init-cms-bundle (PHP):

Affected version(s) >=v3.4.9.12 <v3.4.9.14

Fix Suggestion:

Update to version v3.4.9.14

fem/spof (PHP):

Affected version(s) =1.0.0 <v1.0.0

Fix Suggestion:

Update to version v1.0.0

lednick-project/admin-bundle (PHP):

Affected version(s) =2.x-dev <2.1.0

Fix Suggestion:

Update to version 2.1.0

waigeo/jsloggerbundle (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

darekmeco/platform (PHP):

Affected version(s) =dev-master <test

Fix Suggestion:

Update to version test

kunstmaan/translator-bundle (PHP):

Affected version(s) =dev-sf3 <3.0.1

Fix Suggestion:

Update to version 3.0.1

darekmeco/platform (PHP):

Affected version(s) >=2.3.0 <=3.2.1

Fix Suggestion:

Update to version no_fix

tuhuokeji/diandicms (PHP):

Affected version(s) >=dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

diginova/yii2-metronic (PHP):

Affected version(s) =dev-master <0.1RC

Fix Suggestion:

Update to version 0.1RC

darekmeco/platform (PHP):

Affected version(s) >=2.0.0 <2.0.1

Fix Suggestion:

Update to version 2.0.1

g2design/g2-modules (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

bitsoflove-asgard/translation (PHP):

Affected version(s) =dev-master <1.1.0

Fix Suggestion:

Update to version 1.1.0

sonata-project/admin-bundle (PHP):

Affected version(s) =dev-addRemoveTab <dev-addTypehint

Fix Suggestion:

Update to version dev-addTypehint

kunstmaan/translator-bundle (PHP):

Affected version(s) =4.0.x-dev <4.0.1

Fix Suggestion:

Update to version 4.0.1

socialog/admin (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

ddicloud/ddicms (PHP):

Affected version(s) >=1.2.3 <1.2.5

Fix Suggestion:

Update to version 1.2.5

imagina/cms-platform (PHP):

Affected version(s) >=dev-iblog-unit-testing <1.0.0

Fix Suggestion:

Update to version 1.0.0

sonata-project/admin-bundle (PHP):

Affected version(s) >=3.1.0 <dev-release/3.105.2

Fix Suggestion:

Update to version dev-release/3.105.2

laraflat/laraflat (PHP):

Affected version(s) >=dev-dev <=3.0.0

Fix Suggestion:

Update to version no_fix

denisgold/translation-module (PHP):

Affected version(s) =dev-revert-337-kay899-patch-2

Fix Suggestion:

Update to version no_fix

diego3/myframework-skeleton (PHP):

Affected version(s) >=dev-master <=v1.0.0

Fix Suggestion:

Update to version no_fix

ddicloud/ddicms (PHP):

Affected version(s) >=1.2.6 <1.2.8

Fix Suggestion:

Update to version 1.2.8

msbios/dashboard (PHP):

Affected version(s) >=dev-master <=v1.0.2

Fix Suggestion:

Update to version no_fix

maarsson/translation (PHP):

Affected version(s) =1.9.1 <1.10.0

Fix Suggestion:

Update to version 1.10.0

capham/translation-module (PHP):

Affected version(s) =dev-master <1.1.0

Fix Suggestion:

Update to version 1.1.0

msbios/cpanel (PHP):

Affected version(s) >=v0.0.1 <v1.0.20

Fix Suggestion:

Update to version v1.0.20

sentora/laravel-base-sentora (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

tellaw/sunshine-admin-bundle (PHP):

Affected version(s) =v0.9.22 <v0.9.23

Fix Suggestion:

Update to version v0.9.23

kunstmaan/bundles-cms (PHP):

Affected version(s) =5.1.x-dev <5.1.1

Fix Suggestion:

Update to version 5.1.1

ns/color-admin-bundle (PHP):

Affected version(s) =dev-SF5

Fix Suggestion:

Update to version no_fix

fem/spof (PHP):

Affected version(s) >=dev-master <v1.0.0-beta1

Fix Suggestion:

Update to version v1.0.0-beta1

ddicloud/ddicms (PHP):

Affected version(s) =1.0.7 <1.0.8

Fix Suggestion:

Update to version 1.0.8

kunstmaan/bundles-cms (PHP):

Affected version(s) =dev-sf3 <3.0.1

Fix Suggestion:

Update to version 3.0.1

diego3/myframework-core (PHP):

Affected version(s) =v1.0-alpha

Fix Suggestion:

Update to version no_fix

guoyu/yii2admin (PHP):

Affected version(s) >=dev-master <=v1.3.1

Fix Suggestion:

Update to version no_fix

sunnnnn/yii2-admin (PHP):

Affected version(s) >=1.3.0 <=1.3.3

Fix Suggestion:

Update to version no_fix

marciocamello/yii2-x-editable (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

smartysoft/yii2-smartysoft-ample (PHP):

Affected version(s) >=dev-dev <=2.4.4

Fix Suggestion:

Update to version no_fix

sonata-project/admin-bundle (PHP):

Affected version(s) >=3.0.0 <dev-3.x-dev-kit

Fix Suggestion:

Update to version dev-3.x-dev-kit

i9code/laravelmetronic3 (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

networking/init-cms-bundle (PHP):

Affected version(s) =v3.4.9.9 <v3.4.9.10

Fix Suggestion:

Update to version v3.4.9.10

kunstmaan/translator-bundle (PHP):

Affected version(s) =3.3.x-dev <3.3.1

Fix Suggestion:

Update to version 3.3.1

fadriqueclickennet/translation-module (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

tecnodesignc/translation-module (PHP):

Affected version(s) >=2.1.0 <=3.0.0

Fix Suggestion:

Update to version no_fix

syscontrollers/admin (PHP):

Affected version(s) =dev-master <v0.0.4

Fix Suggestion:

Update to version v0.0.4

procoders/admin (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

vitalets/x-editable (PHP):

Affected version(s) >=dev-dev <1.0.0

Fix Suggestion:

Update to version 1.0.0

networking/init-cms-bundle (PHP):

Affected version(s) =v3.4.9.2 <v3.4.9.3

Fix Suggestion:

Update to version v3.4.9.3

networking/init-cms-bundle (PHP):

Affected version(s) >=v3.4.9.6 <v3.4.9.8

Fix Suggestion:

Update to version v3.4.9.8

kotchuprik/yii2-x-editable (PHP):

Affected version(s) >=dev-master <=v1.0

Fix Suggestion:

Update to version no_fix

crisu83/yiistrap-widgets (PHP):

Affected version(s) >=dev-develop <1.0.0

Fix Suggestion:

Update to version 1.0.0

kiyora/dashboard-generator (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

maarsson/translation (PHP):

Affected version(s) =2.0.x-dev <2.0.1

Fix Suggestion:

Update to version 2.0.1

awcode/cloudmngr (PHP):

Affected version(s) >=dev-dev <=v0.0.2

Fix Suggestion:

Update to version no_fix

fedorov-aleksey/yii2-package-theme-absolute-admin (PHP):

Affected version(s) >=v1.0.3 <=v1.1.2

Fix Suggestion:

Update to version no_fix

jimmlog/modern (PHP):

Affected version(s) >=dev-master <v1.9.0

Fix Suggestion:

Update to version v1.9.0

fem/spof (PHP):

Affected version(s) =2.0.0 <v2.0.0

Fix Suggestion:

Update to version v2.0.0

notegame/asgardcms (PHP):

Affected version(s) >=dev-develop <1.0.0

Fix Suggestion:

Update to version 1.0.0

pine207/pine-dashboard (PHP):

Affected version(s) >=dev-main <=9.x-dev

Fix Suggestion:

Update to version no_fix

strausmann/x-editable (PHP):

Affected version(s) >=dev-dev <1.0.0

Fix Suggestion:

Update to version 1.0.0

kunstmaan/bundles-cms (PHP):

Affected version(s) =3.4.x-dev <3.4.1

Fix Suggestion:

Update to version 3.4.1

i9code/metronic (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/resources/assets/global/plugins/jquery.appendGrid/acorn-6.4.1 <=dev-master

Fix Suggestion:

Update to version no_fix

sonata-project/admin-bundle (PHP):

Affected version(s) =dev-3.x-update-documentation <dev-VincentLanglet-patch-3

Fix Suggestion:

Update to version dev-VincentLanglet-patch-3

evgenbel/platform (PHP):

Affected version(s) =dev-master <test

Fix Suggestion:

Update to version test

tuhuokeji/diandicms (PHP):

Affected version(s) >=1.0.6 <1.0.8

Fix Suggestion:

Update to version 1.0.8

arionum/pool (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

imagina/itranslation-module (PHP):

Affected version(s) >=1.0.0 <3.0.1

Fix Suggestion:

Update to version 3.0.1

techpromux/base-bundle (PHP):

Affected version(s) >=1.0.1 <=1.0.6

Fix Suggestion:

Update to version no_fix

sonata-project/admin-bundle (PHP):

Affected version(s) >=3.106.0 <dev-release/3.107

Fix Suggestion:

Update to version dev-release/3.107

zxf/xfadmin (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

madephp/framework (PHP):

Affected version(s) =dev-main

Fix Suggestion:

Update to version no_fix

sagsoz06/translation-module (PHP):

Affected version(s) >=dev-master <2.1.4

Fix Suggestion:

Update to version 2.1.4

kunstmaan/translator-bundle (PHP):

Affected version(s) =3.4.x-dev <3.4.1

Fix Suggestion:

Update to version 3.4.1

idavoll/translation-module (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/Themes/Flatly/prismjs-1.21.0 <2.0.0

Fix Suggestion:

Update to version 2.0.0

reedboat/yiiwheels (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

e282486518/yii2admin (PHP):

Affected version(s) >=dev-master <=v1.3.2

Fix Suggestion:

Update to version no_fix

asgardcms/platform (PHP):

Affected version(s) =dev-dependabot/npm_and_yarn/Themes/Adminlte/axios-0.21.1 <1.0.0

Fix Suggestion:

Update to version 1.0.0

sonata-project/admin-bundle (PHP):

Affected version(s) =dev-issue_7096 <dev-fix/7361

Fix Suggestion:

Update to version dev-fix/7361

asgardcms/platform (PHP):

Affected version(s) =1.0.x-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

denisgold/translation-module (PHP):

Affected version(s) =3.0.x-dev <3.0.1

Fix Suggestion:

Update to version 3.0.1

kunstmaan/bundles-cms (PHP):

Affected version(s) =3.5.x-dev <3.5.1

Fix Suggestion:

Update to version 3.5.1

skeeks/yii2-template-smarty (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

dbrisinajumi/x-editable-yii (PHP):

Affected version(s) >=1.1.0 <=1.3.1

Fix Suggestion:

Update to version no_fix

ristorantino/plugins (PHP):

Affected version(s) =dev-adicion-ko-jq-update <dev-master

Fix Suggestion:

Update to version dev-master

fedorov-aleksey/yii2-package-theme-absolute-admin (PHP):

Affected version(s) >=dev-master <v1.0.2

Fix Suggestion:

Update to version v1.0.2

yinhe/yincart (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

lednick-project/admin-bundle (PHP):

Affected version(s) =3.x-dev <3.1.0

Fix Suggestion:

Update to version 3.1.0

igeekspace/twothink (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

kunstmaan/translator-bundle (PHP):

Affected version(s) =3.5.x-dev <3.5.1

Fix Suggestion:

Update to version 3.5.1

idavoll/translation-module (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/Themes/Flatly/marked-4.0.10 <=dev-revert-337-kay899-patch-2

Fix Suggestion:

Update to version no_fix

networking/init-cms-bundle (PHP):

Affected version(s) =v3.4.1.4 <v3.4.1.5

Fix Suggestion:

Update to version v3.4.1.5

tellaw/sunshine-admin-bundle (PHP):

Affected version(s) >=v0.9.11 <v0.9.21

Fix Suggestion:

Update to version v0.9.21

kunstmaan/bundles-cms (PHP):

Affected version(s) =4.1.x-dev <4.1.1

Fix Suggestion:

Update to version 4.1.1

sagsoz06/adminlte-theme (PHP):

Affected version(s) >=dev-master <=2.1.9

Fix Suggestion:

Update to version no_fix

maarsson/translation (PHP):

Affected version(s) =3.7.2 <dev-dependabot/npm_and_yarn/Themes/Flatly/marked-4.0.10

Fix Suggestion:

Update to version dev-dependabot/npm_and_yarn/Themes/Flatly/marked-4.0.10

kunstmaan/translator-bundle (PHP):

Affected version(s) =5.2.x-dev <5.2.1

Fix Suggestion:

Update to version 5.2.1

kmaking/admin-template (PHP):

Affected version(s) =v1.0.2 <v1.0.4

Fix Suggestion:

Update to version v1.0.4

tuananh-web/asset-management (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

kunstmaan/bundles-cms (PHP):

Affected version(s) =5.0.x-dev <5.0.1

Fix Suggestion:

Update to version 5.0.1

waigeo/jsloggerbundle (PHP):

Affected version(s) =v1.0.0.x-dev <1.0.1

Fix Suggestion:

Update to version 1.0.1

2amigos/yiiwheels (PHP):

Affected version(s) =dev-1.0.7-beta <1.0.7-beta

Fix Suggestion:

Update to version 1.0.7-beta

asgardcms/translation-module (PHP):

Affected version(s) =dev-master <1.1.0

Fix Suggestion:

Update to version 1.1.0

vwlabs/vwtranslation-module (PHP):

Affected version(s) >=dev-master <=1.0.0

Fix Suggestion:

Update to version no_fix

sonata-project/admin-bundle (PHP):

Affected version(s) =3.105.3 <dev-release/3.105.3

Fix Suggestion:

Update to version dev-release/3.105.3

ddicloud/ddicms (PHP):

Affected version(s) =1.2.1 <1.2.2

Fix Suggestion:

Update to version 1.2.2

idavoll/translation-module (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/Themes/Adminlte/datatables.net-1.10.22 <test

Fix Suggestion:

Update to version test

sunnnnn/yii2-admin (PHP):

Affected version(s) =dev-master <1.0.0

Fix Suggestion:

Update to version 1.0.0

maarsson/translation (PHP):

Affected version(s) =1.7.0 <1.8.0

Fix Suggestion:

Update to version 1.8.0

armoni/platform (PHP):

Affected version(s) >=1.9.0 <=1.14.1

Fix Suggestion:

Update to version no_fix

kunstmaan/translator-bundle (PHP):

Affected version(s) =5.0.x-dev <5.0.1

Fix Suggestion:

Update to version 5.0.1

asgardcms/translation-module (PHP):

Affected version(s) >=1.2.0 <=2.0.x-dev

Fix Suggestion:

Update to version no_fix

denisgold/translation-module (PHP):

Affected version(s) =2.0.x-dev <2.0.1

Fix Suggestion:

Update to version 2.0.1

kunstmaan/translator-bundle (PHP):

Affected version(s) =4.2.x-dev <4.2.1

Fix Suggestion:

Update to version 4.2.1

bardis/cms-symfony2 (PHP):

Affected version(s) >=v1.1.0 <2.8.8

Fix Suggestion:

Update to version 2.8.8

jimmlog/metradmin (PHP):

Affected version(s) >=dev-master <3.6.2.5

Fix Suggestion:

Update to version 3.6.2.5

dbrisinajumi/x-editable-yii (PHP):

Affected version(s) >=dev-dev <1.0.0

Fix Suggestion:

Update to version 1.0.0

tuhuokeji/diandicms (PHP):

Affected version(s) =1.0.2 <1.0.3

Fix Suggestion:

Update to version 1.0.3

idavoll/translation-module (PHP):

Affected version(s) >=dev-dependabot/npm_and_yarn/Themes/Adminlte/jquery-3.5.0 <3.5.1

Fix Suggestion:

Update to version 3.5.1

networking/init-cms-bundle (PHP):

Affected version(s) >=v3.4.7 <v3.4.8

Fix Suggestion:

Update to version v3.4.8

techpromux/base-bundle (PHP):

Affected version(s) =dev-master <1.0

Fix Suggestion:

Update to version 1.0

jjsoft-ar/translation-module (PHP):

Affected version(s) >=1.2.0 <=2.0.x-dev

Fix Suggestion:

Update to version no_fix

crisu83/yiistrap-widgets (PHP):

Affected version(s) =1.7.0

Fix Suggestion:

Update to version no_fix

i9code/laravelmetronic2 (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

tuhuokeji/diandicms (PHP):

Affected version(s) >=1.1.4 <=1.3.1

Fix Suggestion:

Update to version no_fix

wafl/core-controls (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

networking/init-cms-bundle (PHP):

Affected version(s) =v3.4.1.2 <v3.4.1.3

Fix Suggestion:

Update to version v3.4.1.3

hustshenl/yii2-metronic (PHP):

Affected version(s) >=dev-master <=0.1.5

Fix Suggestion:

Update to version no_fix

mauricioschmitz/homer-assets (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

kunstmaan/bundles-cms (PHP):

Affected version(s) =4.0.x-dev <dev-analysis-m4agPW

Fix Suggestion:

Update to version dev-analysis-m4agPW

networking/init-cms-bundle (PHP):

Affected version(s) >=v3.4.9.15 <v4.4.9

Fix Suggestion:

Update to version v4.4.9

qla/adminpanel (PHP):

Affected version(s) >=dev-master <=0.2

Fix Suggestion:

Update to version no_fix

sonata-project/admin-bundle (PHP):

Affected version(s) >=3.107.2 <4.0.0-alpha-2

Fix Suggestion:

Update to version 4.0.0-alpha-2

ns/color-admin-bundle (PHP):

Affected version(s) >=2.1.0 <dev-BS4

Fix Suggestion:

Update to version dev-BS4

idavoll/translation-module (PHP):

Affected version(s) =2.0.x-dev <2.0.1

Fix Suggestion:

Update to version 2.0.1

tellaw/sunshine-admin-bundle (PHP):

Affected version(s) >=v0.9.0 <v0.9.10

Fix Suggestion:

Update to version v0.9.10

ddicloud/ddicms (PHP):

Affected version(s) =1.2.9 <1.3.0

Fix Suggestion:

Update to version 1.3.0

raalveco/scaffolding (PHP):

Affected version(s) =0.1

Fix Suggestion:

Update to version no_fix

kunstmaan/translator-bundle (PHP):

Affected version(s) =4.1.x-dev <4.1.1

Fix Suggestion:

Update to version 4.1.1

maioradv/admin2-cdn (PHP):

Affected version(s) >=dev-main <=v1.0.3

Fix Suggestion:

Update to version no_fix

m-comscience/yii2-homer-asset (PHP):

Affected version(s) >=dev-master <=v1.0.0

Fix Suggestion:

Update to version no_fix

asgardcms/platform (PHP):

Affected version(s) >=2.0.0 <2.0.1

Fix Suggestion:

Update to version 2.0.1

amintado/yii2-aprico-asset (PHP):

Affected version(s) >=dev-master <=0.2.x-dev

Fix Suggestion:

Update to version no_fix

sonata-project/admin-bundle (PHP):

Affected version(s) =2.x-dev <dev-VincentLanglet-patch-2

Fix Suggestion:

Update to version dev-VincentLanglet-patch-2

vitalets/x-editable-yii (PHP):

Affected version(s) >=1.1.0 <=1.3.2

Fix Suggestion:

Update to version no_fix

wayfirer/ddicms (PHP):

Affected version(s) >=dev-dev <=1.3.1

Fix Suggestion:

Update to version no_fix

bktz/cup (PHP):

Affected version(s) =1.0

Fix Suggestion:

Update to version no_fix

networking/init-cms-bundle (PHP):

Affected version(s) =v3.4.1.8 <v3.4.1.9

Fix Suggestion:

Update to version v3.4.1.9

Related Resources (1)

https://github.com/Voog/wysihtml/commit/34ebe36a3d6b070883f9315fa3097f7598ed11e9

Do you need more information?

CVSS v4

Base Score:

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

PASSIVE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

NONE

Vulnerable System Availability

NONE

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

AI app security

Mend AI

Application security

Mend AppSec

Dependency management

Mend Renovate

Expand coverage

Runtime and beyond

AI security

Code security

Supply chain security

Compliance & reporting

vs. AI security tools

vs. AppSec tools

Buyer’s guides

About Mend.io

Partners & people

Customers

Learn & explore

Guides

Developers hub