PatchTheCVE: oemprohttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-9461: Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated userhttps://patchthecve.com/cve/CVE-2020-9461.htmlhttps://patchthecve.com/cve/CVE-2020-9461.htmlWed, 17 Jun 2026 03:27:59 +0000MEDIUM 5.4: Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable.CVE-2020-9460: Octech Oempro 4.7 through 4.11 allow XSS by an authenticated userhttps://patchthecve.com/cve/CVE-2020-9460.htmlhttps://patchthecve.com/cve/CVE-2020-9460.htmlWed, 17 Jun 2026 03:27:59 +0000MEDIUM 5.4: Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vulnerable.CVE-2019-19740: Octeth Oempro 4.7 and 4.8 allow SQL injectionhttps://patchthecve.com/cve/CVE-2019-19740.htmlhttps://patchthecve.com/cve/CVE-2019-19740.htmlWed, 17 Jun 2026 02:27:10 +0000CRITICAL 9.8: Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable.