Medium severity6.1NVD Advisory· Published Nov 19, 2025· Updated Jun 17, 2026
CVE-2025-63211
CVE-2025-63211
Description
Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
46.5.0-9 thru 6.5.0-10+ 1 more
- (no CPE)range: 6.5.0-9 thru 6.5.0-10
- (no CPE)
cpe:2.3:a:bridgetech:vbc_server:6.5.0-9:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:bridgetech:vbc_server:6.5.0-9:*:*:*:*:*:*:*
- cpe:2.3:a:bridgetech:vbc_server:6.5.0-10:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63211_bridgetech%20VBC%20Server%20and%20Element%20Manager%20Stored%20%20xssnvdExploitThird Party Advisory
- bridgetech.tvnvdProduct
News mentions
0No linked articles in our index yet.