CVE-2025-9145: Scada-LTS SVG File view_edit.shtm cross site scripting

Published Aug 19, 2025

Updated

A security vulnerability has been detected in Scada-LTS 2.7.8.1. This issue affects some unknown processing of the file viewedit.shtm of the component SVG File Handler. Such manipulation of the argument backgroundImageMP leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Affected Software

2 affected components

Scada-LTS Scada-LTS

Scada-LTS Scada-LTS=2.7.8.1

Event History

Aug 19, 2025

CVE Published

via MITRE·03:32 PM

Data Sourced

via MITRE·03:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Feb 28, 57989

Event

via FIRST·06:38 AM

Frequently Asked Questions

What is the severity of CVE-2025-9145?

CVE-2025-9145 is classified as a high-severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2025-9145?

To fix CVE-2025-9145, update Scada-LTS to the latest version that addresses this SVG File Handler vulnerability.

What component is affected by CVE-2025-9145?

CVE-2025-9145 affects the SVG File Handler component specifically related to the view_edit.shtm file.

What type of attack does CVE-2025-9145 enable?

CVE-2025-9145 enables cross-site scripting (XSS) attacks through the manipulation of the backgroundImageMP argument.

Who is affected by CVE-2025-9145?

Individuals and organizations using Scada-LTS version 2.7.8.1 are affected by CVE-2025-9145.