XI
Product
Xibo
22
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 12Low 0
Watch
Add Xibo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-29022 | 8.8 | Apr 12 | Session Hijacking via XSS attack in header and session grid in Xibo CMS Affected: 1.8.0 before 3.3.10; 4.0.0 before 4.0.9 |
| CVE-2023-33177 | 8.8 | May 30 | Xibo is a content management system (CMS) Affected: 1.8.0 before 2.3.17; 3.0.0 before 3.3.5 |
| CVE-2026-31952 | 8.1 | Apr 24 | Xibo CMS API has SQL Injection via DataSet Filter Parameter Affected: 1.7.0 before 4.4.1 |
| CVE-2024-41802 | 8.1 | Jul 30 | Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Data Import Affected: 2.1.0 before 3.3.12; 4.0.0 before 4.0.14 |
| CVE-2025-62369 | 7.2 | Nov 4 | Xibo CMS: Remote Code Execution through module templates Affected: 4.1.0 before 4.3.1 |
| CVE-2024-29023 | 7.2 | Apr 12 | Session Hijacking via token exposure on the session page in Xibo CMS Affected: 1.8.0 before 3.3.10; 4.0.0 before 4.0.9 |
Showing 6
