medium5.4
CVE-2020-9460
Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user.
Impact
Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vulnerable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octech | Oempro | from 4.7 through 4.11 |