# Plexus anblick digital signage management has an open redirect flaw in its login script

- Date: 2026-01-06
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2020-36912

NVD published an open redirect flaw in Plexus anblick Digital Signage Management. In version 3.1.13, attackers can manipulate the 'pagina' GET parameter in the 'PantallaLogin' script.

## Sources

- [CVE-2020-36912](https://nvd.nist.gov/vuln/detail/CVE-2020-36912) (NIST NVD)
- [https://exchange.xforce.ibmcloud.com/vulnerabilities/185521](https://exchange.xforce.ibmcloud.com/vulnerabilities/185521)
- [https://packetstormsecurity.com/files/158473](https://packetstormsecurity.com/files/158473)

Page: https://signagelist.org/incidents/2026-01-plexus-anblick-digital-signage-management-has-an/
