CVE-2022-36277

The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks...

CVE-2022-36277

The connected documents confirm CVE-2022-36277 as a persistent XSS vulnerability in TCMAN GIM v8.0.1, caused by unsanitized input in the sReferencia, sDescripcion, txtCodigo, and txtDescripcion parameters of frmGestionStock.aspx and frmEditServicio.aspx. Impact is limited to XSS as described; no ...