Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Informatica del Este Clear all filters
TI-2025-27538 CVE-2025-41350 · GHSA-4vxh-gmj7-xv86

Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este

Priority LOW 23

Stored Cross-site Scripting (XSS)vylnerability type in WinPlus v24.11.27 byInformática del Este that consist of an stored XSS of a stored XSS due to a lack of proper validation of user input by sending a POST request usi…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00305 Published 2025-11-18 No fix listed CWE-79
TI-2025-27537 CVE-2025-41349 · GHSA-jmmc-fjvq-35v4

Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este

Priority LOW 23

Stored Cross-site Scripting (XSS)vylnerability type in WinPlus v24.11.27 byInformática del Este that consist of an stored XSS of a stored XSS due to a lack of proper validation of user input by sending a POST request usi…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00371 Published 2025-11-18 No fix listed CWE-79
TI-2025-27534 CVE-2025-41346 · GHSA-4486-rqpc-38g7

Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este

Priority MEDIUM 40

Faulty authorization control in software WinPlus v24.11.27 by Informática del Este that allows another user to be impersonated simply by knowing their 'numerical ID', meaning that an attacker could compromise another use…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00342 Published 2025-11-18 No fix listed CWE-863