CVE-2025-9233: Scada-LTS view_edit.shtm cross site scripting
A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file viewedit.shtm. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9233?
CVE-2025-9233 is considered a high-severity vulnerability due to its potential for remote exploitation through cross-site scripting.
How do I fix CVE-2025-9233?
To fix CVE-2025-9233, upgrade Scada-LTS to version 2.7.8.2 or later, which addresses this vulnerability.
What types of attacks can CVE-2025-9233 facilitate?
CVE-2025-9233 can facilitate cross-site scripting attacks, potentially allowing attackers to execute malicious scripts in the context of a victim's browser.
Is CVE-2025-9233 affecting any specific versions of Scada-LTS?
Yes, CVE-2025-9233 affects Scada-LTS versions up to and including 2.7.8.1.
Who is at risk due to CVE-2025-9233?
Any users of Scada-LTS versions up to 2.7.8.1 are at risk of exploitation via CVE-2025-9233.