CVE-2025-41350
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
WinPlus v24.11.27 by Informática del Este contains a stored Cross-site Scripting (XSS) vulnerability due to lack of proper validation of user input via the 'descripcion' parameter in a POST request to '/WinplusPortal/ws/sWinplus.svc/json/savesoldoc_post'. This could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details.
Risk Assessment
Attackers can steal authenticated users' session cookies, potentially leading to account takeover and unauthorized actions. Exploitation requires the victim to interact with the injected content.
Recommendation
Upgrade WinPlus to a version containing the fix or contact the vendor for a patch. Implement additional input validation and XSS protection mechanisms.
Other vulnerabilities in WinPlus
See all- CVE-2025-41348Critical
WinPlus version v24.11.27 by Informática del Este contains a SQL injection vulnerability. It allows an attacker to recover, create, update, and delete databases by sending a POST request using the parameters 'val1' and 'cont' to '/WinplusPortal/ws/sWinplus.svc/json/getacumper_post'.
- CVE-2025-41347Critical
WinPlus version v24.11.27 by Informática del Este contains an unlimited upload vulnerability for dangerous file types. It allows an attacker to upload a 'webshell' by sending a POST request to '/WinplusPortal/ws/sWinplus.svc/json/uploadfile'.
- CVE-2025-41346Critical
WinPlus version v24.11.27 by Informática del Este has faulty authorization control that allows impersonation of another user simply by knowing their 'numerical ID'. An attacker can compromise another user's account, affecting confidentiality, integrity, and availability of data.
- CVE-2025-41349Medium
Stored Cross-site Scripting (XSS) vulnerability type in WinPlus v24.11.27 by Informática del Este that consists of an stored XSS due to a lack of proper validation of user input by sending a POST request using the 'descripcion' parameter in '/WinplusPortal/ws/sWinplus.svc/json/savesolpla_post'. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details.
Original NVD description (English source)
Stored Cross-site Scripting (XSS)vylnerability type in WinPlus v24.11.27 byInformática del Este that consist of an stored XSS of a stored XSS due to a lack of proper validation of user input by sending a POST request using the 'descripcion' parameter in '/WinplusPortal/ws/sWinplus.svc/json/savesoldoc_post'. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS