Vulnerability · Published Jan 6, 2026 · Assigned by VulnCheck
CVE-2020-36912Plexus anblick Digital Signage Management 3.1.13 Open Redirect via Pagina Parameter
Critical 9.8
In plain English
A critical-severity open redirect in Plexus anblick Digital Signage Management from Plexus. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.4%top 62.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Plexus anblick Digital Signage Management 3.1.13 contains an open redirect vulnerability in the 'PantallaLogin' script that allows attackers to manipulate the 'pagina' GET parameter. Attackers can craft malicious links that redirect users to arbitrary websites by exploiting improper input validation in the parameter.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Plexus | Plexus anblick Digital Signage Management | 3.1.13 |
Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- Zero Science Lab Disclosure (ZSL-2020-5573) third-party-advisory
- Packet Storm Security Exploit Entry exploit
- IBM X-Force Vulnerability Exchange Entry vdb-entry
- Plexus Vendor Homepage product
- VulnCheck Advisory: Plexus anblick Digital Signage Management 3.1.13 Open Redirect via Pagina Parameter third-party-advisory