Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progress/serverside/serverbackupprogress.sgp that allows remote attackers to inject arbitrary JavaScript by manipula…
CVSS 4.0MEDIUM 5.1·Network·No auth·User interaction·EPSS 0.0029·Published 2026-11-03·Fixed in 7.6.0CWE-79
Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progress/clientside/restoreprogress.sgp that allows remote attackers to inject arbitrary JavaScript by manipulating…
CVSS 4.0MEDIUM 5.1·Network·No auth·User interaction·EPSS 0.0029·Published 2026-11-03·Fixed in 7.6.0CWE-79