CVE-2020-36912

CRITICAL

Plexus anblick Digital Signage Management 3.1.13 - Open Redirect

Title source: llm
STIX 2.1

Description

Plexus anblick Digital Signage Management 3.1.13 contains an open redirect vulnerability in the 'PantallaLogin' script that allows attackers to manipulate the 'pagina' GET parameter. Attackers can craft malicious links that redirect users to arbitrary websites by exploiting improper input validation in the parameter.

References (5)

Core 5
Core References
Third Party Advisory third-party-advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5573.php
Exploit, Third Party Advisory exploit
https://packetstormsecurity.com/files/158473
Third Party Advisory, VDB Entry vdb-entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/185521
Various Sources product
https://www.plexus.es/

Scores

CVSS v3 9.8
EPSS 0.0037
EPSS Percentile 29.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-601
Status published
Published Jan 06, 2026
Tracked Since Feb 18, 2026