CVE-2025-8743

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-8743

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8743.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-8743

Published

2025-08-08T23:15:37.410Z

Modified

2026-04-10T05:36:24.667068Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. This affects an unknown part of the file /datasourceedit.shtm of the component Virtual Data Source Property Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

References

Affected packages

Git / github.com/scada-lts/scada-lts

Affected ranges

Type

GIT

Repo

https://github.com/scada-lts/scada-lts

Events

Introduced

Last affected

42291e597f2e55797343d56522c1223607b731b3

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.8.1"
        }
    ]
}

Affected versions

0.*

0.0.9.7

0.0.9.8

v0.*

v0.0.9.5

v0.0.9.5_1

v0.0.9.8

v2.*

v2.0.0

v2.0.1

v2.1.0

v2.1.0_19_02_2020

v2.2.0

v2.2.1

v2.3.0

v2.3.1

v2.4.1.1

v2.5.0

v2.7.8

v2.7.8.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8743.json"