CVE-2020-9461: Octech Oempro

Medium severity, CVSS 5.4. EPSS: 1.3% chance of exploitation in the next 30 days.

Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable.

Affected products

• Octech Oempro: from 4.7, up to and including 4.11

Published 2020-04-14. Last modified 2026-06-17.