CVE-2026-10057 — ITP Technology｜ITS Intelligent SCADA System - Stored Cross-Site Scripting

CVE-2026-10057

ITP Technology｜ITS Intelligent SCADA System - Stored Cross-Site Scripting PUBLISHED

Description (CNA)

ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load.

Affected (CNA)

Vendor / product	Versions
ITP Technology / ITS Intelligent SCADA System	affected 2.1

CWE

CWE-79

References

https://www.twcert.org.tw/tw/cp-132-10941-6c082-1.html
https://www.twcert.org.tw/en/cp-139-10942-2b78b-2.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.