CVE-2025-10234 | Scada-LTS up to 2.7.8.1 Data Point Edit /data_point_edit.shtm Text Renderer properties cross site scripting

A vulnerability was found in Scada-LTS up to 2.7.8.1 and classified as problematic. This vulnerability affects unknown code of the file /data_point_edit.shtm of the component Data Point Edit Module. The manipulation of the argument Text Renderer properties results in cross site scripting.

This vulnerability is reported as CVE-2025-10234. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.