Description (CNA)
Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.octeth.com/
- https://github.com/Guilherme-Rubert/CVE-2020-9461
- https://guilhermerubert.com/blog/cve-2020-9460/
ADP enrichment
No English description supplied.