iest records

5 published records for vendor iest.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
37Monitor	CVE-2025-41346No exploit	Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Esteiest · winplus · CWE-863 Pre-auth Broken access control (IDOR) XSS	Critical9.3	—	0.3%	Nov 18, 2025
34Monitor	CVE-2025-41348No exploit	Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Esteiest · winplus · CWE-89 SQL injection XSS	High8.7	—	0.5%	Nov 18, 2025
34Monitor	CVE-2025-41347No exploit	Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Esteiest · winplus · CWE-434 File upload XSS	High8.7	—	0.3%	Nov 18, 2025
20Monitor	CVE-2025-41349No exploit	Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Esteiest · winplus · CWE-79 XSS	Medium5.1	—	0.3%	Nov 18, 2025
20Monitor	CVE-2025-41350No exploit	Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Esteiest · winplus · CWE-79 XSS	Medium5.1	—	0.3%	Nov 18, 2025

CVE-2025-41346
37Monitor
Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este
CriticalCVSS 9.3No exploitEPSS 0%
iest · winplusNov 18, 2025
CVE-2025-41348
34Monitor
Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este
HighCVSS 8.7No exploitEPSS 1%
- SQL injection
- XSS
iest · winplusNov 18, 2025
CVE-2025-41347
34Monitor
Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este
HighCVSS 8.7No exploitEPSS 0%
- File upload
- XSS
iest · winplusNov 18, 2025
CVE-2025-41349
20Monitor
Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este
MediumCVSS 5.1No exploitEPSS 0%
- XSS
iest · winplusNov 18, 2025
CVE-2025-41350
20Monitor
Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este
MediumCVSS 5.1No exploitEPSS 0%
- XSS
iest · winplusNov 18, 2025