CNNVD-202508-2362 Information

Aug 20, 2025 cve

CNNVD ID

CNNVD-202508-2362

CVE-2025-9233

CNNVD Published: 2025-08-20

Description (Chinese)

Scada-LTS是Scada-LTS开源的一个开源、基于 web 的多平台解决方案。 Scada-LTS 2.7.8.1及之前版本存在安全漏洞，该漏洞源于对文件view_edit.shtm中参数Name的错误操作导致跨站脚本攻击。

Description (English)

Scada-LTS is an open source, web-based multi-platform solution for Scada-LTS open source. There is a security loophole in Scada-LTS 2.7.8.1 and earlier versions, which results from an error of action on the parameter name in fileview edit.shtm, resulting in a cross-site script attack.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

Scada-LTS

Published

2025-08-20

Last Modified

2026-02-24

References

https://vuldb.com/?submit.631118 https://vuldb.com/?id.320766 https://vuldb.com/?ctiid.320766 https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/Stored%20XSS%20endpoint%20view_edit.shtm%20parameter%20name.md#poc https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/CVE-2025-9233.md https://nvd.nist.gov/vuln/detail/CVE-2025-9233

Share on: