CVE-2025-63211

Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint...

CVE-2025-63211

A stored cross-site scripting (XSS) vulnerability exists in bridgetech VBC Server & Element Manager firmware versions 6.5.0-9 through 6.5.0-10 . The flaw stems from improper neutralization of input within the addName parameter of the /vbc/core/userSetupDoc/userSetupDoc endpoint. Successful exploi...