CNNVD-202508-3013 Information
Aug 25, 2025
cve
CNNVD ID
CNNVD-202508-3013
Related CVE
- CNNVD Published: 2025-08-25
Description (Chinese)
Scada-LTS是Scada-LTS开源的一个开源、基于 web 的多平台解决方案。 Scada-LTS 2.7.8.1及之前版本存在安全漏洞，该漏洞源于文件/pointHierarchySLTS中Title参数存在跨站脚本。
Description (English)
Scada-LTS is an open source, web-based multi-platform solution for Scada-LTS open source. Scada-LTS 2.7.8.1 and previous versions contain a security loophole, which stems from the presence of a cross-site script of Title parameters in the document/pointHilarchySLTS.
Hazard Level
Critical
Vulnerability Type
其他
Affected Vendor
Scada-LTS
Published
2025-08-25
Last Modified
2026-02-24
References
https://vuldb.com/?submit.633445 https://github.com/CVE-Hunters/CVE/blob/main/Scada-LTS/Stored%20XSS%20endpoint%20pointHierarchySLTS%20parameter%20title.md#poc https://vuldb.com/?id.321240 https://vuldb.com/?ctiid.321240 https://nvd.nist.gov/vuln/detail/CVE-2025-9404
Share on: