CVE-2025-41346 – Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este

CVE ID : CVE-2025-41346

Published : Nov. 18, 2025, 10:15 a.m. | 49 minutes ago

Description : Faulty authorization control in software WinPlus v24.11.27 by Informática del Este that allows another user to be impersonated simply by knowing their ‘numerical ID’, meaning that an attacker could compromise another user’s account, thereby affecting the confidentiality, integrity, and availability of the data stored in the application.

Severity: 9.3 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…