CVE-2020-9461

MEDIUM 5.4CVE-2020-9461 · Published 14/04/2020 · updated 17/06/2026

In short

CVE-2020-9461 is a MEDIUM (CVSS 5.4) vulnerability affecting oempro (octech).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
oempro octech	`≥ 4.7, ≤ 4.11`	No fix yet

Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.