CVE-2025-63211

A stored cross-site scripting (XSS) vulnerability exists in bridgetech VBC Server & Element Manager firmware versions 6.5.0-9 through 6.5.0-10 . The flaw stems from improper neutralization of input within the addName parameter of the /vbc/core/userSetupDoc/userSetupDoc endpoint. Successful exploi...