The vulnerability of the Common.getHomeDir() function in the multi-platform web solution for creating Scada systems, Scada-LTS, allows a attacker to perform cross-site scripting (XSS) attacks.

The vulnerability of the Common.getHomeDir function in the multi-platform web solution for creating Scada systems in Scada-LTS is related to an incorrect restriction on the path name of the directory. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attac...