Responsive Filemanager 9.8.1 Cross Site Scripting

`I. VULNERABILITY  
-------------------------  
Responsive Filemanager 9.8.1 Reflected Cross Site Scripting (XSS)  
  
II. CVE REFERENCE  
-------------------------  
CVE-2018-18062  
  
III. VENDOR  
-------------------------  
https://www.responsivefilemanager.com  
  
IV. REFERENCES  
-------------------------  
https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-18062  
  
V. CREDIT  
-------------------------  
Yavuz Atlas of Biznet Bilisim  
http://www.biznet.com.tr/biznet-guvenlik-duyurulari  
  
VI. DESCRIPTION  
-------------------------  
Responsive Filemanager version 9.8.1 is vulnerable to cross-site  
scripting. A remote attacker could exploit this vulnerability via a  
crafted URL to execute script in a victim's Web browser within the  
security context of the hosting Web site, once the URL is clicked. An  
attacker could use this vulnerability to steal the victim's  
cookie-based authentication credentials.  
  
VII. PROOF OF CONCEPT  
-------------------------  
http://localhost/filemanager/dialog.php?secretkey="/><script>alert(1)</script>  
`