5.1
Medium
CVE-2025-9145 A security vulnerability has been detected in Scada-LTS 2.7.8.1
Description
A security vulnerability has been detected in Scada-LTS 2.7.8.1. This issue affects some unknown processing of the file view_edit.shtm of the component SVG File Handler. Such manipulation of the argument backgroundImageMP leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Scada-LTS | 2.7.8.1 | No fix stated |
References
- VDB-320523 | Scada-LTS SVG File view_edit.shtm cross site scripting vuldb.com
- VDB-320523 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #628448 | Scada-LTS 2.7.8.1 Cross Site Scripting vuldb.com
- karinagante.github.io karinagante.github.io
- karinagante.github.io karinagante.github.io
Timeline
- Published
- Last modified
Other CVEs of Scada-LTS
The 20 CVEs of Scada-LTS →
CVE-2026-115803
A flaw has been found in Scada-LTS 2.8.0
5.3
Medium
CVE-2025-13791
A vulnerability was identified in Scada-LTS up to 2.7.8.1
5.3
Medium
CVE-2025-13790
A vulnerability was determined in Scada-LTS up to 2.7.8.1
5.3
Medium
CVE-2025-10235
A flaw has been found in Scada-LTS up to 2.7.8.1
4.8
Medium