CVE-2025-9235: Scada-LTS compound_events.shtm cross site scripting
A flaw has been found in Scada-LTS up to 2.7.8.1. The impacted element is an unknown function of the file compoundevents.shtm. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9235?
CVE-2025-9235 has been classified with a high vulnerability severity due to its potential for remote exploitation.
How do I fix CVE-2025-9235?
To fix CVE-2025-9235, upgrade Scada-LTS to version 2.7.8.2 or later where the vulnerability is patched.
Who is affected by CVE-2025-9235?
CVE-2025-9235 affects users of Scada-LTS versions up to and including 2.7.8.1.
What type of vulnerability is CVE-2025-9235?
CVE-2025-9235 is a cross-site scripting (XSS) vulnerability that can be exploited remotely.
What does the exploitation of CVE-2025-9235 allow an attacker to do?
Exploitation of CVE-2025-9235 allows an attacker to execute arbitrary scripts in the context of the user's session.