The provided vulnerability information specifies the file path (doli/societe/list.php) and parameter (sall) but does not explicitly name any functions involved. XSS vulnerabilities typically occur when user input (like the sall parameter) is directly echoed to the output without proper sanitization. While the root cause is clear (unsanitized reflection of the sall parameter in the HTML output), the advisory and public descriptions do not provide enough code context to identify specific functions or methods responsible for handling this parameter. Without access to the actual codebase or commit diffs, we cannot confidently map the vulnerability to named functions in the code structure.