MEDIUM
Scada-LTS view_edit.shtm cross site scripting
Published Aug 20, 2025
5.1
MEDIUMCVSS 4.0
EPSS 0.29%
Description
A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file view_edit.shtm. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Affected products
- Vendor n/a Product Scada-LTS Defaultn/a
- Version 2.7.8.0StatusaffectedConstraints-
- Version 2.7.8.1StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| n/a | Scada-LTS | n/a |
|
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (5)
- https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/CVE-2025-9233.md relatedExploitThird Party Advisory
- https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/Stored%20XSS%20endpoint%20view_edit.shtm%20parameter%20name.md#poc broken-linkexploitBroken Link
- https://vuldb.com/?ctiid.320766 signaturepermissions-requiredPermissions RequiredVDB Entry
- https://vuldb.com/?id.320766 vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- https://vuldb.com/?submit.631118 third-party-advisoryThird Party AdvisoryVDB Entry
| Link | Providers | Tags |
|---|---|---|
| https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/CVE-2025-9233.md | relatedExploitThird Party Advisory | |
| https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/Stored%20XSS%20endpoint%20view_edit.shtm%20parameter%20name.md#poc | broken-linkexploitBroken Link | |
| https://vuldb.com/?ctiid.320766 | signaturepermissions-requiredPermissions RequiredVDB Entry | |
| https://vuldb.com/?id.320766 | vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry | |
| https://vuldb.com/?submit.631118 | third-party-advisoryThird Party AdvisoryVDB Entry |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Aug 20, 2025
Updated Aug 20, 2025
Reserved Aug 20, 2025
Link CVE-2025-9233
CISA Vulnrichment
Updated Aug 20, 2025