A vulnerability has been found in Flexense Sync Breeze Enterprise Server and Disk Pulse Enterprise 10.4.18 and classified as problematic. This affects an unknown part of the file /add_exclude_dir. This manipulation of the argument exclude_dir causes cross site scripting.
This vulnerability appears as CVE-2025-59898. The attack may be initiated remotely. There is no available exploit.
