Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

xibo-cms — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in xibo-cms, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities for Xibo CMS, a digital signage content management system. It collects entries covering various weakness types, including buffer overflows, cross-site scripting, and SQL injection, spanning the product’s release history. Readers can use this aggregation to track the vendor’s security advisories, analyze the frequency of specific weakness classes, and review the vulnerability history associated with Xibo CMS. The data provides a centralized view of disclosed issues, helping security teams assess exposure and prioritize remediation efforts without relying on scattered individual reports.

Vendor: xibosignage

CVE ID Title CVSS Severity Published
CVE-2026-52730 Xibo CMS Missing Authorization in Module::settingsForm due to PHP operator precedence CWE-862 4.3 Medium 2026-08-31
CVE-2026-42558 Xibo Vulnerable to Stored XSS and Iframe Sandbox Escape via Data Connector Script in DataSet CWE-79 7.6 High 2026-06-10
CVE-2026-42141 Xibo: Authenticated Server-Side Request Forgery (SSRF) in Library Upload via URL functionality CWE-918 7.7 High 2026-05-12
CVE-2026-31956 Xibo CMS has Preview and SavedReport IDOR via disableUserCheck without controller-level authorization CWE-639 4.3 Medium 2026-04-24
CVE-2026-31955 Xibo CMS has Authenticated Server-Side Request Forgery (SSRF) in Remote DataSet Functionality CWE-918 4.9 Medium 2026-04-24
CVE-2026-31953 Xibo CMS has Stored XSS via Notification Body with Zero-Click Execution on Login CWE-79 6.4 Medium 2026-04-24
CVE-2026-31952 Xibo CMS API has SQL Injection via DataSet Filter Parameter CWE-89 7.6 High 2026-04-24
CVE-2025-62369 Xibo CMS: Remote Code Execution through module templates CWE-94 7.2 High 2025-11-04
CVE-2024-43413 Xibo CMS XSS vulnerability using DataSet HTML columns CWE-79 3.5 Low 2024-09-03
CVE-2024-43412 Xibo CMS XSS vulnerability when previewing files uploaded to the library containing HTML/JS CWE-79 4.6 Medium 2024-09-03
CVE-2024-41944 Sensitive Information Disclosure abusing SQL Injection in Xibo CMS proof of play report CWE-89 6.5 Medium 2024-07-30
CVE-2024-41804 Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Column Formula CWE-89 6.5 Medium 2024-07-30
CVE-2024-41803 Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Filter CWE-89 4.9 Medium 2024-07-30
CVE-2024-41802 Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Data Import CWE-89 8.1 High 2024-07-30
CVE-2024-29022 Session Hijacking via XSS attack in header and session grid in Xibo CMS CWE-79 8.8 High 2024-04-12
CVE-2024-29023 Session Hijacking via token exposure on the session page in Xibo CMS CWE-200 7.2 High 2024-04-12
CVE-2023-33181 Sensitive Information Disclosure abusing Stack Trace in Xibo CMS CWE-209 4.3 Medium 2023-05-30
CVE-2023-33180 Sensitive Information Disclosure abusing SQL Injection in Xibo CMS display map CWE-89 6.5 Medium 2023-05-30
CVE-2023-33179 Sensitive Information Disclosure abusing SQL Injection in Xibo CMS nameFilter CWE-89 6.5 Medium 2023-05-30
CVE-2023-33178 Sensitive Information Disclosure abusing SQL Injection in Xibo CMS dataset filter CWE-89 6.5 Medium 2023-05-30
CVE-2023-33177 Xibo CMS vulnerable to Remote Code Execution through Zip Slip CWE-22 8.8 High 2023-05-30

All 21 known CVE vulnerabilities affecting xibo-cms with full Chinese analysis, references, and POCs where available.