Description (CNA)
Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vulnerable.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.octeth.com/
- https://github.com/Guilherme-Rubert/CVE-2020-9460
- https://guilhermerubert.com/blog/cve-2020-9461/
ADP enrichment
No English description supplied.