All-Dynamics: Security Vulnerabilities
All-Dynamics Digital Signage System 2.0.2 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request validation. Attackers can craft a malicious web page that automatically submits forms to create a new user with global administrative privileges when a logged-in user visits the page.
CVSS Score
8.6
EPSS Score
0.001
Published
2025-12-10