TI-2025-27536 CVE-2025-41348 · GHSA-pgc6-pmcp-r3fx
Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este
Priority MEDIUM 40
SQL injection vulnerability in WinPlus v24.11.27 by Informática del Este.
Informatica del Este
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Informatica del Este records in CISA KEVNo Informatica del Este vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Winplus · all components
TI-2025-27535 CVE-2025-41347 · GHSA-4xw5-95w2-c94q
Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este
Priority MEDIUM 40
Unlimited upload vulnerability for dangerous file types in WinPlus v24.11.27 from Informática del Este.
TI-2025-27534 CVE-2025-41346 · GHSA-4486-rqpc-38g7
Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este
Priority MEDIUM 40
Faulty authorization control in software WinPlus v24.11.27 by Informática del Este that allows another user to be impersonated simply by knowing their 'numerical ID', meaning that an attacker could compromise another use…
TI-2025-27538 CVE-2025-41350 · GHSA-4vxh-gmj7-xv86
Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este
Priority LOW 23
Stored Cross-site Scripting (XSS)vylnerability type in WinPlus v24.11.27 byInformática del Este that consist of an stored XSS of a stored XSS due to a lack of proper validation of user input by sending a POST request usi…
TI-2025-27537 CVE-2025-41349 · GHSA-jmmc-fjvq-35v4
Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este
Priority LOW 23
Stored Cross-site Scripting (XSS)vylnerability type in WinPlus v24.11.27 byInformática del Este that consist of an stored XSS of a stored XSS due to a lack of proper validation of user input by sending a POST request usi…