CVE-2025-63211

bridgetech VBC Server & Element Manager (firmware versions 6.5.0-9 through 6.5.0-10 ) is vulnerable to a stored cross-site scripting (XSS) issue. An attacker can exploit this by manipulating the addName parameter within the /vbc/core/userSetupDoc/userSetupDoc API endpoint. Successful exploitation...

CVE-2025-63211

Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint...