5.1
Medium
CVE-2025-9388 A vulnerability was determined in Scada-LTS up to 2.7.8.1
Description
A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function of the file watch_list.shtm. Executing manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Scada-LTS 2.7 | 2.7.8.0 → 2.7.8.1 | No fix stated |
References
- VDB-321221 | Scada-LTS watch_list.shtm cross site scripting vuldb.com
- VDB-321221 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #630800 | Scada-LTS 2.7.8.1 Cross Site Scripting (XSS) Stored vuldb.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Scada-LTS
The 20 CVEs of Scada-LTS →
CVE-2026-115803
A flaw has been found in Scada-LTS 2.8.0
5.3
Medium
CVE-2025-13791
A vulnerability was identified in Scada-LTS up to 2.7.8.1
5.3
Medium
CVE-2025-13790
A vulnerability was determined in Scada-LTS up to 2.7.8.1
5.3
Medium
CVE-2025-10235
A flaw has been found in Scada-LTS up to 2.7.8.1
4.8
Medium