Bdrsuite
Monthly
Reflected cross-site scripting in Vembu BDRSuite before 7.6.0 allows remote unauthenticated attackers to execute arbitrary JavaScript in an operator's browser session when the victim opens a crafted link or request, with effects limited to that session. The assessed vector requires user interaction and shows no server-side impact, making this a moderate, not emergency, priority. A public PoC reference exists but is not verified as working exploit code, and no CISA KEV active-exploitation listing is provided.
Reflected cross-site scripting in Vembu BDRSuite before 7.6.0 allows remote unauthenticated attackers to execute arbitrary JavaScript in an operator's browser session when the victim opens a crafted link or request, with effects limited to that session. The assessed vector requires user interaction and shows no server-side impact, making this a moderate, not emergency, priority. A public PoC reference exists but is not verified as working exploit code, and no CISA KEV active-exploitation listing is provided.