Low severity3.5NVD Advisory· Published Aug 20, 2025· Updated Apr 29, 2026

CVE-2025-9234

Description

A vulnerability was detected in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file maintenance_events.shtm. The manipulation of the argument Alias results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Scada Lts/SCADA Lts2 versions
cpe:2.3:a:scada-lts:scada-lts:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:scada-lts:scada-lts:*:*:*:*:*:*:*:*range: <=2.7.8.1
- (no CPE)range: <=2.7.8.1

Patches

Vulnerability mechanics

References

github.com/marcelomulder/CVE/blob/main/Scada-LTS/CVE-2025-9234.mdnvdExploitThird Party Advisory
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
github.com/marcelomulder/CVE/blob/main/Scada-LTS/Stored%20XSS%20endpoint%20maintenance_events.shtm%20parameter%20Alias.mdnvdBroken Link
vuldb.comnvdPermissions RequiredVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000