| Package | Affected versions | Patched versions |
|---|---|---|
| digital signage system | = 2.0.2 |
All-Dynamics Digital Signage System 2.0.2 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request validation. Attackers can craft a malicious web page that automatically submits forms to create a new user with global administrative privileges when a logged-in user visits the page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free