CNNVD-202508-2358 Information

Aug 20, 2025 cve

CNNVD ID

CNNVD-202508-2358

CVE-2025-9234

CNNVD Published: 2025-08-20

Description (Chinese)

Scada-LTS是Scada-LTS开源的一个开源、基于 web 的多平台解决方案。 Scada-LTS 2.7.8.1及之前版本存在安全漏洞，该漏洞源于对文件maintenance_events.shtm中参数Alias的错误操作，导致跨站脚本攻击。

Description (English)

Scada-LTS is an open source, web-based multi-platform solution for Scada-LTS open source. The Scada-LTS 2.7.8.1 and previous versions had a security loophole, which resulted from an error in the operation of the parameter Alias in the document Mainnance events.shtm, leading to a cross-site script attack.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

Scada-LTS

Published

2025-08-20

Last Modified

2026-02-24

References

https://vuldb.com/?submit.631119 https://vuldb.com/?id.320767 https://vuldb.com/?ctiid.320767 https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/Stored%20XSS%20endpoint%20maintenance_events.shtm%20parameter%20Alias.md#poc https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/CVE-2025-9234.md https://nvd.nist.gov/vuln/detail/CVE-2025-9234

Share on: