CVE-2020-9460

Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vulnerable...

Design/Logic Flaw

Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vulnerable...

CVE-2020-9460

CVE-2020-9460 / CVE-2020-9461 pertain to Octech Oempro 4.7–4.11. The vulnerability is an authenticated XSS in Octech Oempro’s web interface: specifically, the Campaign.Create command’s CampaignName parameter (CVE-2020-9460) and, in the stored variant, the Media.CreateFolder command’s FolderName p...