This vulnerability in Trippo ResponsiveFilemanager versions up to 9.14.0 involves an unrestricted file upload flaw in an unspecified function within filemanager/dialog.php. The flaw allows remote attackers to upload files without restriction, potentially leading to unauthorized file placement on the server. The vendor has not issued any fix or response, and the product is no longer maintained. Public exploit code has been released, but no known active exploitation is reported.

Successful exploitation allows remote attackers to upload arbitrary files to the server, which could lead to further compromise depending on the server configuration and file usage. Since the vulnerability is remotely exploitable without authentication, it poses a significant risk to affected systems. However, the CVSS score of 6.9 indicates a medium severity impact.

No official patch or remediation is available as the product is no longer supported by the vendor. Users should consider discontinuing use of the affected versions and migrating to alternative, supported file management solutions. Implementing external controls such as web application firewalls or restricting access to the filemanager interface may reduce exposure.