5.1
Medium
CVE-2025-9234 A vulnerability was detected in Scada-LTS up to 2.7.8.1
Description
A vulnerability was detected in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file maintenance_events.shtm. The manipulation of the argument Alias results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Scada-LTS 2.7 | 2.7.8.0 → 2.7.8.1 | No fix stated |
References
- VDB-320767 | Scada-LTS maintenance_events.shtm cross site scripting vuldb.com
- VDB-320767 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #631119 | Scada-LTS 2.7.8.1 Cross Site Scripting (XSS) Stored vuldb.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Scada-LTS
The 20 CVEs of Scada-LTS →
CVE-2026-115803
A flaw has been found in Scada-LTS 2.8.0
5.3
Medium
CVE-2025-13791
A vulnerability was identified in Scada-LTS up to 2.7.8.1
5.3
Medium
CVE-2025-13790
A vulnerability was determined in Scada-LTS up to 2.7.8.1
5.3
Medium
CVE-2025-10235
A flaw has been found in Scada-LTS up to 2.7.8.1
4.8
Medium