CVE-2020-36912 | Plexus anblick Digital Signage Management 3.1.13 contains an… | CVSS 9.8 CRITICAL

Description

Plexus anblick Digital Signage Management 3.1.13 contains an open redirect vulnerability in the 'PantallaLogin' script that allows attackers to manipulate the 'pagina' GET parameter. Attackers can craft malicious links that redirect users to arbitrary websites by exploiting improper input validation in the parameter.

Metadata

CVE ID: CVE-2020-36912
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-01-03 14:10 UTC
Published: 2026-01-06 15:52 UTC
Last updated: 2026-01-06 19:29 UTC
Primary CWE: CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
Vendor / Product: Plexus / Plexus anblick Digital Signage Management
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
Plexus	Plexus anblick Digital Signage Management	—	3.1.13

Weakness (CWE)

CWE	Source	Description
CWE-601	cna	URL Redirection to Untrusted Site ('Open Redirect')

CVSS scores (2)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
5.1	MEDIUM	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

References (5)

Zero Science Lab Disclosure (ZSL-2020-5573) https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5573.php
Packet Storm Security Exploit Entry https://packetstormsecurity.com/files/158473
IBM X-Force Vulnerability Exchange Entry https://exchange.xforce.ibmcloud.com/vulnerabilities/185521
Plexus Vendor Homepage https://www.plexus.es/
VulnCheck Advisory: Plexus anblick Digital Signage Management 3.1.13 Open Redirect via Pagina Parameter https://www.vulncheck.com/advisories/plexus-anblick-digital-signage-management-open-redirect-via-pagina-parameter