Description
A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file view_edit.shtm. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Scada-LTS | 2.7.8.0, 2.7.8.1 | — |
References
- VDB-320766 | Scada-LTS view_edit.shtm cross site scripting vdb-entry technical-description
- VDB-320766 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #631118 | Scada-LTS 2.7.8.1 Cross Site Scripting (XSS) Stored third-party-advisory
- https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/CVE-2025-9233.md related
- https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/Stored%20XSS%20endpoint%20view_edit.shtm%20parameter%20name.md#poc broken-link exploit