PT-2025-29898

CVE-2025-7729

Published

2025-07-17

Updated

2025-07-17

Description by

CVSS 2.0

5.5

Medium

MetricsAV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Scada-LTS versions up to 2.7.8.1

Description A problematic vulnerability exists in Scada-LTS. The issue affects an unknown functionality of the usersProfiles.shtm file. Manipulation of the Username argument leads to cross-site scripting. The attack can be launched remotely. The exploit has been publicly disclosed.

Recommendations Versions prior to 2.8.0 are affected.

Exploitability

Exploit

Fix

Impacts

Researchers

Natan Morette

Nmmorette

Vendors

Affected products

Weakness enumeration

CWE-94: Improper Control of Generation of Code (\'Code Injection\')