CVE-2025-10235

CVE-2025-10235 affects Scada-LTS up to 2.7.8.1 in the Reports Module, via manipulation of the Colour argument in /reports.shtm that enables cross-site scripting. The attack can be initiated remotely and an exploit has been published. Remediation per sources: upgrade to Scada-LTS 2.7.8.2 or later;...

CVE-2025-10234

A vulnerability was detected in Scada-LTS up to 2.7.8.1. This vulnerability affects unknown code of the file /datapointedit.shtm of the component Data Point Edit Module. The manipulation of the argument Text Renderer properties results in cross site scripting. The attack can be launched remotely...

PT-2025-37107

Name of the Vulnerable Software and Affected Versions: Scada-LTS versions prior to 2.7.8.2 Description: A flaw exists in Scada-LTS’s Reports Module due to cross-site scripting. The issue stems from unknown processing of the file /reports.shtm and manipulation of the Colour argument. This...

Scada-LTS 代码注入漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A code injection vulnerability exists in Scada-LTS version 2.7.8.1 and earlier, which stems from an incorrect manipulation of the parameter Colour in the file /reports.shtm, and could lead to a cross-site...

Scada-LTS 代码注入漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A code injection vulnerability exists in Scada-LTS version 2.7.8.1 and earlier, which stems from misuse of the parameter Text Renderer properties in the file /datapointedit.shtm, and could lead to a...

CVE-2025-10234 Scada-LTS Data Point Edit data_point_edit.shtm cross site scripting

A vulnerability was detected in Scada-LTS up to 2.7.8.1. This vulnerability affects unknown code of the file /datapointedit.shtm of the component Data Point Edit Module. The manipulation of the argument Text Renderer properties results in cross site scripting. The attack can be launched remotely...

CVE-2025-10234

CVE-2025-10234 affects Scada-LTS before 2.7.8.2, with the vulnerability residing in the Data Point Edit Module’s /data_point_edit.shtm. The issue stems from improper handling of the Text Renderer properties argument, enabling cross-site scripting (XSS) when the page is accessed remotely. The publ...

CVE-2025-10234 Scada-LTS Data Point Edit data_point_edit.shtm cross site scripting

A vulnerability was detected in Scada-LTS up to 2.7.8.1. This vulnerability affects unknown code of the file /datapointedit.shtm of the component Data Point Edit Module. The manipulation of the argument Text Renderer properties results in cross site scripting. The attack can be launched remotely...

PT-2025-37105

Name of the Vulnerable Software and Affected Versions: Scada-LTS versions prior to 2.7.8.2 Description: A vulnerability exists in Scada-LTS that allows for cross site scripting. The issue affects unknown code within the /data point edit.shtm file of the Data Point Edit Module. The manipulation of...

The vulnerability of the multi-platform web solution for creating Scada systems, Scada-LTS, is related to the lack of protective measures for the web page structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the multi-platform web solution for creating Scada systems is related to the lack of protection measures for the web page structure during the processing of the end-point pointHierarchy/new/. Exploiting this vulnerability allows a malicious actor to perform cross-site scripti...

CVE-2025-9404

A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

CVE-2025-9388

A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function of the file watchlist.shtm. Executing manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be...

CVE-2025-9404

A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

CVE-2025-9404 Scada-LTS Folder pointHierarchySLTS cross site scripting

A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

CVE-2025-9404 Scada-LTS Folder pointHierarchySLTS cross site scripting

A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

CVE-2025-9404

CVE-2025-9404 concerns Scada-LTS versions up to 2.7.8.1. The vulnerability is a stored/remote cross-site scripting flaw in an unknown function within the /pointHierarchySLTS file of the Folder Handler component. The attack is triggered by manipulating the Title argument, and the exploit is public...

Scada-LTS 安全漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A security vulnerability exists in Scada-LTS version 2.7.8.1 and earlier, which stems from cross-site scripting in the Title parameter in the file /pointHierarchySLTS...

CVE-2025-9388

A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function of the file watchlist.shtm. Executing manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be...

CVE-2025-9388 Scada-LTS watch_list.shtm cross site scripting

A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function of the file watchlist.shtm. Executing manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be...

CVE-2025-9388

CVE-2025-9388 affects Scada-LTS up to version 2.7.8.1. The vulnerability is a cross-site scripting issue in the watch_list.shtm file caused by manipulation of the Name argument, with remote exploitability. Publicly disclosed exploits exist. Remediation guidance across connected sources recommends...