medium5.4
CVE-2020-9461
Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user.
Impact
Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octech | Oempro | from 4.7 through 4.11 |