CVE-2025-41349 | Informática del Este WinPlus 24.11.27 Query sWinplus descripcion cross site scripting

A vulnerability was found in Informática del Este WinPlus 24.11.27. It has been declared as problematic. This vulnerability affects unknown code of the file /WinplusPortal/ws/sWinplus of the component Query Handler. Such manipulation of the argument descripcion leads to cross site scripting.

This vulnerability is documented as CVE-2025-41349. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More