CVE-2025-9144 MEDIUM

CVE-2025-9144: Scada-LTS publisher_edit.shtm cross site scripting

Vendor N/A

Product Scada-LTS

Weakness CWE-79 · XSS

Published August 19, 2025

Last update August 23, 2025

View on NVD All CVEs

CVSS base score

5.1/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A weakness has been identified in Scada-LTS 2.7.8.1. This vulnerability affects unknown code of the file publisher_edit.shtm. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Key dates

02Disclosure timeline

August 19, 2025 CVE published

August 23, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-9144

Related vulnerabilities

04Related CVE

CVE-2025-53926 Emlog has Stored Cross-site Scripting vulnerability due to error CVE-2022-0157 Cross-site Scripting (XSS) - Stored in phoronix-test-suite/phoronix-test-suite CVE-2024-8045 Advanced WordPress Backgrounds <= 1.12.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via imageTag Parameter CVE-2024-2170 VK All in One Expansion Unit <= 9.96.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className CVE-2026-35455 immich has Stored XSS via OCR Text in 360° Panorama Viewer