5.1
Medium
CVE-2025-9143 A security flaw has been discovered in Scada-LTS 2.7.8.1
Description
A security flaw has been discovered in Scada-LTS 2.7.8.1. This affects an unknown part of the file mailing_lists.shtm. The manipulation of the argument name/userList/address results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Scada-LTS | 2.7.8.1 | No fix stated |
References
- VDB-320521 | Scada-LTS mailing_lists.shtm cross site scripting vuldb.com
- VDB-320521 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #628437 | Scada-LTS 2.7.8.1 Cross Site Scripting vuldb.com
- karinagante.github.io karinagante.github.io
- karinagante.github.io karinagante.github.io
Timeline
- Published
- Last modified
Other CVEs of Scada-LTS
The 20 CVEs of Scada-LTS →
CVE-2026-115803
A flaw has been found in Scada-LTS 2.8.0
5.3
Medium
CVE-2025-13791
A vulnerability was identified in Scada-LTS up to 2.7.8.1
5.3
Medium
CVE-2025-13790
A vulnerability was determined in Scada-LTS up to 2.7.8.1
5.3
Medium
CVE-2025-10235
A flaw has been found in Scada-LTS up to 2.7.8.1
4.8
Medium