Unrated severityNVD Advisory· Published Nov 18, 2025· Updated Feb 18, 2026
Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este
CVE-2025-41346
Description
Faulty authorization control in software WinPlus v24.11.27 by Informática del Este that allows another user to be impersonated simply by knowing their 'numerical ID', meaning that an attacker could compromise another user's account, thereby affecting the confidentiality, integrity, and availability of the data stored in the application.
Affected products
2- Range: = 24.11.27
- Informatica del Este/WinPlusv5Range: 24.11.27
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.