Low severity3.5NVD Advisory· Published Aug 20, 2025· Updated Apr 29, 2026

CVE-2025-9233

Description

A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file view_edit.shtm. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Scada Lts/SCADA Lts2 versions
cpe:2.3:a:scada-lts:scada-lts:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:scada-lts:scada-lts:*:*:*:*:*:*:*:*range: <=2.7.8.1
- (no CPE)range: <=2.7.8.1

Patches

Vulnerability mechanics

References

github.com/marcelomulder/CVE/blob/main/Scada-LTS/CVE-2025-9233.mdnvdExploitThird Party Advisory
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
github.com/marcelomulder/CVE/blob/main/Scada-LTS/Stored%20XSS%20endpoint%20view_edit.shtm%20parameter%20name.mdnvdBroken Link
vuldb.comnvdPermissions RequiredVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000