Crestron CEN-NVS200 Stored XSS (no CSRF protection) Vulnerability

This device used to transmit audio/video over ethernet has a vulnerability in which a bad actor can easily insert a XSS or XRSF payload into the product's viewer page. Possibly sold by multiple vendors http://www.vivotek.com/vs8102/ , etc Usage Info Change the systemhostname value in the POST dat...