CSRF in Xibosignage Xibo

CVE-2013-4889

Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add a new administrator via the AddUser actio…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.009 (54.9th percentile) — read the EPSS interpretation.