| Package | Affected versions | Patched versions |
|---|---|---|
| scada-lts | = 2.7.8.1 |
ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker who lures a victim into visiting a crafted URL can execute arbitrary JavaScript in the context of the victim's browser session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free