CVE-2020-9461

Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user

published April 14, 2020

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01347 · 71.2th percentile
Published
2020-04-14T14:35Z
EPSS history
Timeline
  • 14 APR 14:35Z
    Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user
    cvelistv5