CNNVD-202508-2361 Information

Aug 20, 2025 cve

CNNVD ID

CNNVD-202508-2361

CVE-2025-9235

CNNVD Published: 2025-08-20

Description (Chinese)

Scada-LTS是Scada-LTS开源的一个开源、基于 web 的多平台解决方案。 Scada-LTS 2.7.8.1及之前版本存在安全漏洞，该漏洞源于对文件compound_events.shtm中参数Name的错误操作导致跨站脚本攻击。

Description (English)

Scada-LTS is an open source, web-based multi-platform solution for Scada-LTS open source. There is a security loophole in Scada-LTS 2.7.8.1 and earlier versions, which stems from an error in the use of the parameter name in the document Compund events.shtm, resulting in a cross-stop script attack.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

Scada-LTS

Published

2025-08-20

Last Modified

2026-02-24

References

https://vuldb.com/?submit.631120 https://vuldb.com/?id.320768 https://vuldb.com/?ctiid.320768 https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/Stored%20XSS%20endpoint%20compound_events.shtm%20parameter%20name.md#poc https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/CVE-2025-9235.md https://nvd.nist.gov/vuln/detail/CVE-2025-9235

Share on: