CVE-2025-9144: Scada-LTS publisher_edit.shtm cross site scripting

Published Aug 19, 2025

Updated

A weakness has been identified in Scada-LTS 2.7.8.1. This vulnerability affects unknown code of the file publisheredit.shtm. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Affected Software

2 affected components

Scada-LTS Scada-LTS

Scada-LTS Scada-LTS=2.7.8.1

Event History

Aug 19, 2025

CVE Published

via MITRE·03:02 PM

Data Sourced

via MITRE·03:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Feb 27, 57989

Event

via FIRST·08:01 PM

Frequently Asked Questions

What is the severity of CVE-2025-9144?

CVE-2025-9144 is classified as a cross-site scripting vulnerability which can lead to unauthorized access and data theft.

How do I fix CVE-2025-9144?

To mitigate CVE-2025-9144, ensure that inputs to the publisher_edit.shtm file are properly sanitized and encode output to prevent script execution.

Who is affected by CVE-2025-9144?

CVE-2025-9144 affects users of Scada-LTS version 2.7.8.1.

Can CVE-2025-9144 be exploited remotely?

Yes, CVE-2025-9144 can be exploited remotely, allowing attackers to execute scripts in the user's browser.

What type of attack is associated with CVE-2025-9144?

CVE-2025-9144 is associated with cross-site scripting (XSS) attacks, which can manipulate web pages viewed by users.