| Package | Affected versions | Patched versions |
|---|---|---|
| vbc server | = 6.5.0-10= 6.5.0-9 |
Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free