CVE-2025-9388

A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function of the file watch_list.shtm. Executing manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

• CWE-79
• CWE-94

• https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/CVE-2025-9388.mdExploit, Third Party Advisory
• https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/Stored_XSS_endpoint_watch_list.shtm_parameter_name.md#pocBroken Link
• https://vuldb.com/?ctiid.321221Permissions Required, VDB Entry
• https://vuldb.com/?id.321221Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.630800Third Party Advisory, VDB Entry
• https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/CVE-2025-9388.mdExploit, Third Party Advisory
• https://vuldb.com/?submit.630800Third Party Advisory, VDB Entry

Published

Aug 24, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9382A weakness has been identified in FNKvision Y215 CCTV Camera…6.4
• CVE-2025-9383A security vulnerability has been detected in FNKvision Y215…2.5
• CVE-2025-9384A vulnerability was detected in appneta tcpreplay up to 4.5.…5.5
• CVE-2025-9385A flaw has been found in appneta tcpreplay up to 4.5.1. The …5.5
• CVE-2025-9386A vulnerability has been found in appneta tcpreplay up to 4.…5.5
• CVE-2025-9387A vulnerability was found in DCN DCME-720 9.1.5.11. This aff…9.8
• CVE-2025-9389A vulnerability was identified in vim 9.1.0000. Affected is …5.5
• CVE-2025-9390A security flaw has been discovered in vim up to 9.1.1615. A…5.5
• CVE-2025-9391A weakness has been identified in Bjskzy Zhiyou ERP up to 11…9.8
• CVE-2025-9392A security vulnerability has been detected in Linksys RE6250…8.8
• CVE-2025-9393A vulnerability was detected in Linksys RE6250, RE6300, RE63…8.8
• CVE-2025-9394A flaw has been found in PoDoFo 1.1.0-dev. This issue affect…5.5