CVE-2025-9145

Scada-LTS SVG File view_edit.shtm cross site scripting

CVSS 5.1 MEDIUMEPSS 0.3%CWE-79 CWE-94

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 5.1EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

19 ago 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A security vulnerability has been detected in Scada-LTS 2.7.8.1. This issue affects some unknown processing of the file view_edit.shtm of the component SVG File Handler. Such manipulation of the argument backgroundImageMP leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Productos afectados

n/a · Scada-LTS

Referencias

https://karinagante.github.io/cve-2025-9145/https://karinagante.github.io/cve-2025-9145/#proof-of-concept-poc https://vuldb.com/?ctiid.320523 https://vuldb.com/?id.320523 https://vuldb.com/?submit.628448