VulnAI


EUVD-2021-33943

ID: EUVD-2021-33943

Severity: medium

CVSS v4: Not provided

CVSS v3: 5.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)

CWE: None listed

Source: ENISA

Description

The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability could be used to carry out a number of browser-based attacks including browser hijacking or theft of sensitive data.

Timestamps

References

No references provided.