VendorsXibo Signagexiboany version
Vulnerabilities

Xibo Signage Xibo any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

15CVEs
CVE-2023-33177
Xibo CMS vulnerable to Remote Code Execution through Zip Slip
Published 2023-05-30 · Modified
8.81 PoCEPSS 0.070
CVE-2024-41802
Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Data Import
Published 2024-07-30 · Modified
8.1EPSS 0.005
CVE-2026-31952
Xibo CMS API has SQL Injection via DataSet Filter Parameter
Published 2026-04-24 · Analyzed
8.1EPSS 0.004
CVE-2025-62369
Xibo CMS: Remote Code Execution through module templates
Published 2025-11-04 · Analyzed
7.2EPSS 0.009
CVE-2023-33178
Sensitive Information Disclosure abusing SQL Injection in Xibo CMS dataset filter
Published 2023-05-30 · Modified
6.5EPSS 0.006
CVE-2023-33179
Sensitive Information Disclosure abusing SQL Injection in Xibo CMS nameFilter
Published 2023-05-30 · Modified
6.5EPSS 0.006
CVE-2023-33180
Sensitive Information Disclosure abusing SQL Injection in Xibo CMS display map
Published 2023-05-30 · Modified
6.5EPSS 0.006
CVE-2024-41804
Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Column Formula
Published 2024-07-30 · Modified
6.5EPSS 0.004
CVE-2026-31953
Xibo CMS has Stored XSS via Notification Body with Zero-Click Execution on Login
Published 2026-04-24 · Analyzed
6.4EPSS 0.002
CVE-2024-43412
Xibo CMS XSS vulnerability when previewing files uploaded to the library containing HTML/JS
Published 2024-09-03 · Analyzed
5.4EPSS 0.003
CVE-2023-33181
Sensitive Information Disclosure abusing Stack Trace in Xibo CMS
Published 2023-05-30 · Modified
5.3EPSS 0.005
CVE-2026-31955
Xibo CMS has Authenticated Server-Side Request Forgery (SSRF) in Remote DataSet Functionality
Published 2026-04-24 · Analyzed
4.9EPSS 0.005
CVE-2024-41803
Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Filter
Published 2024-07-30 · Modified
4.9EPSS 0.004
CVE-2024-43413
Xibo CMS XSS vulnerability using DataSet HTML columns
Published 2024-09-03 · Analyzed
4.8EPSS 0.003
CVE-2026-31956
Xibo CMS has Preview and SavedReport IDOR via disableUserCheck without controller-level authorization
Published 2026-04-24 · Analyzed
4.3EPSS 0.003