Browse CVEs

MEDIUM 5.4 CVE-2026-31953 Xibo is an open source digital signage platform with a web content management system and Windows display player software. A stored Cross-Site Scripti… Xibo 4.4.1+ Fix from $1,6002026-04-24 HIGH 8.1 CVE-2026-31952 Xibo is an open source digital signage platform with a web content management system and Windows display player software. Versions 1.7 through 4.4.0 … Xibo 4.4.1+ Fix from $1,9502026-04-24 HIGH 7.2 CVE-2025-62369 Xibo is an open source digital signage platform with a web content management system (CMS). Versions 4.3.0 and below contain a Remote Code Execution … Xibo 4.3.1+ Fix from $1,9502025-11-04 MEDIUM 5.4 CVE-2024-43412 Xibo is an open source digital signage platform with a web content management system (CMS). Prior to version 4.1.0, a cross-site scripting vulnerabil… Xibo 4.1.0+ Fix from $1,6002024-09-03 HIGH 8.1 CVE-2024-41802 Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API routes inside the CMS responsible for Filtering D… Xibo 3.3.12 / 4.0.14+ Fix from $1,9502024-07-30 MEDIUM 6.5 CVE-2024-41804 Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API route inside the CMS responsible for Adding/Editi… Xibo 3.3.12 / 4.0.14+ Fix from $1,6002024-07-30 MEDIUM 6.5 CVE-2023-33179 Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.5 in the … Xibo 3.3.5+ Fix from $1,6002023-05-30 MEDIUM 6.5 CVE-2023-33180 Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.2 in the … Xibo 3.3.5+ Fix from $1,6002023-05-30 MEDIUM 5.3 CVE-2023-33181 Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version 3.3.5, some API routes will print a stack trace when called… Xibo 3.3.5+ Fix from $1,6002023-05-30 HIGH 8.8 CVE-2023-33177EPSS 7% Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can be uploaded… Xibo 2.3.17 / 3.3.5+ Fix from $1,9502023-05-30 MEDIUM 6.5 CVE-2023-33178 Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `/dataset/data/{id}` API route inside the CMS startin… Xibo 2.3.17 / 3.3.5+ Fix from $1,6002023-05-30 HIGH 7.5 CVE-2013-4887 SQL injection vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to execute arbitrary SQL commands via the displayid pa… Xibo No fix yet Fix from $1,9502014-01-29 MEDIUM 6.8 CVE-2013-4889 Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote attackers to hijack the authentica… Xibo No fix yet Fix from $1,6002014-01-29 MEDIUM 5.0 CVE-2013-5979EPSS 18% Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files vi… Xibo No fix yet Fix from $1,6002013-10-02