Are stored passwords encrypted?

Hi!

Actually there seems to be a attack on FileZilla stored passwords because they're saved as plain text in a xml file.

How WinSCP handle this? Are the stored passwords stored as plain text as well, or are they encrypted?

Please read documentation:
https://winscp.net/eng/docs/security_credentials