CVE-2022-36277: Tcman Gim

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks.

Affected products

• Tcman Gim: version 8.0.1 only

Published 2023-10-04. Last modified 2026-06-17.