Vulnerability Details CVE-2022-36277
The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 24.7%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2022-36277
-
cpe:2.3:a:tcman:gim:8.0.1