XI
Product
Xibo
20
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 12Low 0
Watch
Add Xibo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33177 | 8.8 | May 30 | Xibo is a content management system (CMS) Affected: 1.8.0 before 2.3.17; 3.0.0 before 3.3.5 |
| CVE-2026-31952 | 8.1 | Apr 24 | Xibo CMS API has SQL Injection via DataSet Filter Parameter Affected: 1.7.0 before 4.4.1 |
| CVE-2024-41802 | 8.1 | Jul 30 | Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Data Import Affected: 2.1.0 before 3.3.12; 4.0.0 before 4.0.14 |
| CVE-2025-62369 | 7.2 | Nov 4 | Xibo CMS: Remote Code Execution through module templates Affected: 4.1.0 before 4.3.1 |
| CVE-2024-41944 | 6.5 | Jul 30 | Sensitive Information Disclosure abusing SQL Injection in Xibo CMS proof of play report Affected: 2.1.0 before 3.3.12; 4.0.0 before 4.0.14 |
| CVE-2024-41804 | 6.5 | Jul 30 | Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Column Formula Affected: 2.1.0 before 3.3.12; 4.0.0 before 4.0.14 |
| CVE-2023-33180 | 6.5 | May 30 | Xibo is a content management system (CMS) Affected: 3.2.0 before 3.3.5 |
| CVE-2023-33179 | 6.5 | May 30 | Xibo is a content management system (CMS) Affected: 3.2.0 before 3.3.5 |
| CVE-2023-33178 | 6.5 | May 30 | Xibo is a content management system (CMS) Affected: 1.4.0 before 2.3.17; 3.0.0 before 3.3.5 |
| CVE-2026-31953 | 5.4 | Apr 24 | Xibo CMS has Stored XSS via Notification Body with Zero-Click Execution on Login Affected: before 4.4.1 |
| CVE-2024-43412 | 5.4 | Sep 3 | Xibo CMS XSS vulnerability when previewing files uploaded to the library containing HTML/JS Affected: before 4.1.0 |
| CVE-2023-33181 | 5.3 | May 30 | Xibo is a content management system (CMS) Affected: 3.0.0 before 3.3.5 |
| CVE-2026-31955 | 4.9 | Apr 24 | Xibo CMS has Authenticated Server-Side Request Forgery (SSRF) in Remote DataSet Functionality Affected: before 4.4.1 |
| CVE-2024-41803 | 4.9 | Jul 30 | Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Filter Affected: 2.1.0 before 3.3.12; 4.0.0 before 4.0.14 |
| CVE-2024-43413 | 4.8 | Sep 3 | Xibo CMS XSS vulnerability using DataSet HTML columns Affected: before 4.1.0 |
| CVE-2026-31956 | 4.3 | Apr 24 | Xibo CMS has Preview and SavedReport IDOR via disableUserCheck without controller-level authorization Affected: before 4.4.1 |
| CVE-2013-4889 | – | Jan 29 | Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote attackers to hijack the authentication of administrators for… Affected: 1.4.2 |
| CVE-2013-4888 | – | Jan 29 | Cross-site scripting (XSS) vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the layout parameter in the… Affected: 1.4.2 |
| CVE-2013-4887 | – | Jan 29 | SQL injection vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to execute arbitrary SQL commands via the displayid parameter Affected: 1.4.2 |
| CVE-2013-5979 | – | Oct 2 | Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files via a Affected: 1.2.0; 1.2.0; 1.2.0; 1.2.1; 1.2.2; 1.4.0; +2 more |
Showing 20