CVE-2013-4889

2014-01-2918:00:00

mitre

www.cve.org

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add a new administrator via the AddUser action or (2) conduct cross-site scripting (XSS) attacks, as demonstrated by CVE-2013-4888.