CVE-2020-9460

CVE-2020-9460 / CVE-2020-9461 pertain to Octech Oempro 4.7–4.11. The vulnerability is an authenticated XSS in Octech Oempro’s web interface: specifically, the Campaign.Create command’s CampaignName parameter (CVE-2020-9460) and, in the stored variant, the Media.CreateFolder command’s FolderName p...