Description
A Cross-Site Request Forgery (CSRF) in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request.
Medium · 6.5
CVE-2025-63953
EUVD-2025-198969GHSA-h64r-3mwf-34h6
A Cross-Site Request Forgery (CSRF) in the /usapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitraril…
Published Nov 24, 2025 · Updated Nov 24, 2025 · Assigned by mitre