The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability could be used to carry out a number of browser-based attacks including browser hijacking or theft of sensitive data.
https://www.incibe.es/en/incibe-cert/notices/aviso/tcman-gim-cross-site-scripting-xss