CVE-2025-71451

Vembu BDRSuite versions prior to 7.6.0 are vulnerable to an unauthenticated cross-site scripting (XSS) flaw in templates/progress/serverside/serverbackupprogress.sgp. The root cause is the unsanitized interpolation of request parameters—specifically ClientName , BackupName , and grpName —into loa...

CVE-2025-71451 Vembu BDRSuite < 7.6.0 XSS via serverbackupprogress.sgp

Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progress/serverside/serverbackupprogress.sgp that allows remote attackers to inject arbitrary JavaScript by manipulating request parameters such as ClientName, BackupName, and grpName that are...

EUVD-2025-211247

Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progress/serverside/serverbackupprogress.sgp that allows remote attackers to inject arbitrary JavaScript by manipulating request parameters such as ClientName, BackupName, and grpName that are...