All-Dynamics Digital Signage System 2.0.2 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request validation. Attackers can craft a malicious web page that automatically submits forms to create a new user with global administrative privileges when a logged-in user visits the page.
Get an AI-powered plain-language explanation of this vulnerability and remediation steps.
Login to generate AI explanation5 reference(s) from NVD